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(54) Information transmission method and apparatus for combining multiplexing and encryption 



(57) An information transmission system (100) 
transmits an encrypted information (It) comprised of a 
plurality of information units (lu) each hierarchically 
encrypted and multiplexed to each other is communi- 
cated between at least two parties. The information 
transmission system (100) is constructed by a transmit- 
ting unit (110) and a receiving unit (130). The transmit- 
ting unit (110) is provided with an information unit 
generator (111) which produces the information unit 
(lu); a scrambler (112) which encrypts the information 
unit (lu) to produce an encrypted information unit (lue), 
and multiplexer (113) which multiplexes at least one of 
those information unit (lu) and said encrypted informa- 
tion unit (lue) to produce a multiplexed information unit 
(Im). The receiving unit (130) is provided with a lower 
layer descrambler (132) which decrypts the encrypted 
information (It) to produce a multiplexed information unit 
(Im), demultiplexer (133) which demultiplexes the multi- 
plexed information unit (Im) into any of encrypted infor- 
mation unit (lue), multiplexed information unit (lue) and 
information unit (lu). and information unit descrambler 
(134) which decrypts the encrypted information unit 
due). 
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Description 

BACKGROUND OF THE INVENTION 
Field of the Invention 

[0001] The present invention relates generally to a 
method and an apparatus for encrypting information in 
computer communication and data broadcasting, and 
transmitting the encrypted information. 

Description of the Background Art 

[0002] In Fig. 25, a conventional information transmis- 
sion apparatus is shown. The conventional information 
transmission apparatus 1900 includes a transmitting 
unit 1910, transmitter 1920, and receiving unit 1930. 
Description is now made by taking two types of specific 
examples, those are information transmission in the 
Internet as Example 1 and digital broadcasting as 
Example 2. A plurality of receiving units 1930 may cor- 
respond to one transmitting unit 1930. 
[0003] The transmitting unit 1930 produces transmis- 
sion information It obtained by subjecting an information 
unit lu to multiplexing and encryption, and output 
thereof. The information unit lu is a collection of elec- 
tronic data having meanings for a user, for example, 
such as text information, voice information, still image 
information, moving image information, HTML (Hyper- 
text Makeup Language) information, and their combina- 
tion. 

Transmitting unit 1910 

[0004] The transmitting unit 1 91 0 contains an informa- 
tion unit generator 1911, a multiplexer 1912, a lower 
layer scrambler 1913, and a sender 1914. 
[0005] The information unit generator 191 1 generates 
a plurality of information units lu, and outputs thereof. In 
Example 1, the information unit generator 1911 outputs 
the information units lu which are, for example, a text 
the user entered with a keyboard or the like, and an 
image taken into a computer, and others already stored 
in the computer. The information unit generator 1911 is 
an input screen portion of electronic mail software, and 
a server in a broadcasting station on the Internet, for 
example. 

[0006] On the other hand, in Example 2, all informa- 
tion units lu generated are previously stored in the infor- 
mation unit generator 1911. A method for merely 
selectively outputting the information units lu in accord- 
ance with a predetermined schedule is considered. The 
information unit generator 1911 is a broadcasting sta- 
tion system containing a program management system 
in a sending system of digital broadcasting, a cart 
machine of a VTR, an MPEG-2 encoder, an EPG (Elec- 
tronic Program Guide) management sending system of 
digital broadcasting, and the like. Additional information 



such as EPG must be sent out with the same contents 
thereof maintained for a long time. Therefore, the same 
contents may, in some cases, are repeatedly outputted 
in a period on the order of seconds in the information 

s unit generator 1911. 

[0007] The multiplexer 1912 receives the plurality of 
information units lu outputted by the information unit 
generator 1911. Then, the multiplexer 1912 multiplexes 
the inputted information units lu, and outputs the multi- 

10 plexed information units lu as multiple information Im. 
By the multiplexing, the plurality of information units lu 
are converted into a format (multiple information Im) 
suitable for efficient transmission in the transmitter 
1920. 

is [0008] In Exarrple 1 , the multiplexer 1912 is an MIME 
(Multi-purpose Internet Mail Extensions) encoder used 
for sending multimedia information by an electronic mail 
on the Internet, for example. In this case, the multiplexer 
1 91 2 respectively takes text information, image informa- 

20 tion, voice information, and so forth which are the plural- 
ity of information units lu as parts. Then the multiplexer 
1912 converts the parts into a multipartite message 
conforming to MIME for collecting the plurality of parts, 
and outputs the message. The formal specification of 

25 the MIME is defined by RFC (Request for Comments) 
1521/1522. 

[0009] On the other hand, in Example 2, the multi- 
plexer 1912 is a service multiplexer for obtaining TS 
(Transport Stream) of an MPEG-2 systems from a plu- 

30 rality of stream data, for example. The MPEG-2 systems 
and the TS are standardized by ISO/IEC CD 13818-1. 
In this case, the multiplexer 1912 divides each of the 
plurality of information units lu outputted by the informa- 
tion unit generator 191 1 into packets called PES (Pack- 

35 etized Elementary Stream), and multiplexes the 
obtained packets on the basis of a certain rule. 
[0010] The lower layer scrambler 1913 receives the 
multiple information Im outputted by the multiplexer 
1912, and encrypts the multiple information Im in 

40 accordance with a predetermined encryption algorithm, 
and outputs the encrypted result as encrypted multiple 
information Ime. In Example 1 , the lower layer scram- 
bler 1913 may be software PGP (Pretty Good Privacy) 
on which an RSA cipher which is a public key cipher, for 

45 example, mounted therein is started with an encryption 
option. An output of the lower layer scrambler 1913 is a 
text of an electronic mail encrypted using the RSA 
cipher. The RSA cipher is described in detail in an arti- 
cle entitled by R. L. Rivest, A. Shamir, and L Adleman 

so which are contrivers themselves "A Method for Obtain- 
ing Digital Signatures and Public Key Cryptosystems" 
(Vol. 21, No. 2 issued on February, 1978 in Communica- 
tions of the ACM). The PGP is described in detail in an 
article entitled by Simson Garfinkel "PGP: Pretty Good 

55 Privacy" (O'Reilly & Associates). 

[0011] On the other hand, in Example 2, the lower 
layer scrambler 1913 may be, for example, a scrambler 
of a transport layer. The lower layer scrambler 1913 
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encrypts a payload portion of inputted TS of MPEG-2 
using an encryption algorithm such as MULTI2 and 
DES(the Data Encryption Standard), and outputs the 
encrypted TS of the MPEG-2 which is the result thereof. 
Note that MULTI2 described in ARIB report No. 74 is 
developed by Hitachi Ltd. for the application of digital 
broadcasting system. 

[001 2] The sender 1 91 4 receives the encrypted multi- 
ple information Ime outputted by the lower layer scram- 
bler 1913, and converts the encrypted multiple 
information Ime into transmission information It which 
will be inputted to the transmitter 1920. In Example 1, 
the sender 1914 is a program for adding a mail header 
composed of a destination field, a sender field, and so 
forth to the text of the electronic mail. An output of the 
sender 1914 is the text of the electronic mail to which 
the mail header is added. On the other hand, in Exam- 
ple 2, the sender 1914 is an error-correcting encoder 
and a modulator lor the TS of the MPEG-2. 

Transmitter 1920 

[0013] The transmitter 1920 transmits the inputted 
transmission information It to a physically distant point. 
Both inputs and outputs of the transmitter 1920 are the 
transmission information It. All the inputs of the trans- 
mitter 1920 may not appear in the outputs to the receiv- 
ing unit 1930 without any error. In Example 1, the 
transmitter 1920 is a plurality of mail communication 
daemons which are connected to each other by a chan- 
nel such as the Internet for interpreting and executing 
an SMTP (Simple Mail Transfer Protocol). Examples of 
the typical mail communication daemon include "send- 
mail". The formal specification of the SMTP is defined 
by RFC 821 , RFC 822, and RFC 974. The sendmail is 
described in detail in an article entitled by E. Allman 
""SENDMAIL - An Internetwork Mail Router" Unix Pro- 
grammer's manual" (CSRG U. C. Berkeley issued on 
July, 1983). 

[0014] On the other hand, in Example 2, the transmit- 
ter 1920 is constituted by an up-converter, a parabola 
antenna for sending data to a satellite, a communication 
satellite, and a ground receiving antenna. 

Receiving unit 1930 

[001 5] The receiving unit 1 930 receives the transmis- 
sion information It transmitted by the transmitter 1920, 
and presents an information unit !u to a user. The 
receiving unit 1930 includes a receiver 1931, a lower 
layer descrambler 1932, a demultiplexer 1933. a repro- 
ducer 1934, a storage 1935, and presenter 1936. 
[0016] The receiver 1931 receives the transmission 
information It outputted by the transmitter 1920. and 
takes out the whole or a part of thereof. Then, the 
receiver 1931 reproduces an encrypted multiple infor- 
mation Ime based on the transmission information it 
taken out. In Example 1 , the receiver 1 931 is a front end 



program for mail transmission. On the other hand, in 
Example 2, the receiver 1 931 is the connection of a sat- 
ellite broadcasting tuner, a demodulator and an error- 
correcting decoder. 

5 [001 7] The lower layer descrambler 1 932 receives the 
encrypted multiple information Ime outputted by the 
receiver 1931, and decrypts the encrypted multiple 
information Ime, and reproduces the multiple informa- 
tion Im. In Example 1 , the lower layer descrambler 1932 

w is a PGP program which is started with a decryption 
option. On the other hand, in Example 2, the lower layer 
descrambler 1932 is a descrambler of the transport 
layer. 

[0018] The demultiplexer 1933 separates each infor- 
ms mation unit lu from the multiple information Im, takes out 
the separated information unit lu, and outputs the infor- 
mation unit lu taken out. In Example 1 , the demultiplexer 

1933 is an MIME decoder, and separates the text infor- 
mation, the image information, and so forth which are 

20 then respective parts included in the multipartite mes- 
„ jsage as separate information, to take out the separate 
information. On the other hand, in Example 2, the 
demultiplexer 1933 is a demultiplexer for the TS of the 
MPEG-2. The demultiplexer 1933 separates a plurality 

25 of streams which are multiplexed by the MPEG-2 sys- 
tems. 

[0019] The reproducer 1934 receives the information 
unit lu outputted by the demultiplexer 1933, and pro- 
duces a reproduction information Ir1 which is reproduc- 

30 ible information. In Example 1 , the reproducer 1934 may 
be a text file viewer, image file presenting software, etc. 
On the other hand, in Example 2, the reproducer 1934 
may be an MPEG-2 decoder for reproducing voices or 
images encoded by the MPEG-2, for example. In this 

35 case, the output is an NTSC (National Television Sys- 
tem Standard Committee) signal or an analog voice sig- 
nal. 

[0020] The storage 1935 receives the reproduction 
information outputted by the reproducer 1934, and 

40 stores the first reproduction information Irl . Then, the 
storage 1935 also outputs the first reproduction in for- 
mation in therefrom as a second reproduction informa- 
tion Ir2 on demands for reproduction. This operation is 
hereinafter merely referred to as "reproduction". It is to 

45 be noted that the first and second reproduction informa- 
tion Irl and Ir2 are identical with respect to the contents 
thereof, but different in time for the presentation, as 
described soon later. 

[0021] In Example 1, the storage 1935 may be a file 
so system in OS (operating System) or software for man- 
aging the classification of electronic mails. On the other 
hand, in Example 2. the storage 1935 may be a VTR 
(Video Tape Recorder) or VCR (Video Cassette Tape 
Recorder) for recording and reproducing an NTSC sig- 
55 nal and an analog voice signal. 

[0022] The presenter 1 936 receives the first reproduc- 
tion information Ir1 and outputted by the reproducer 

1934 and the second reproduction information Ir2 out- 
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putted by the storage 1935, and presents either one or 
both of the information to a user. In Example 1 , the pre- 
senter 1936 may be a window system such as X-win- 
dow or Microsoft Windows for presenting image and 
voice to a user. On the other hand, in Example 2, the 
presenter 1936 may be a television receiver for inputting 
and receiving an NTSC signal and an analog voice sig- 
nal, for example. 

[0023] In Fig. 26, an example of encrypted multiple 
information unit ImeOd produced by the information 
transmission apparatus 1900 is shown. According to 
this example, the encrypted multiple information unit 
ImeOd includes four information units Iu1d, Iu2d, Iu3d, 
and Iu4d each indicated by a circle in the drawing. A 
rectangle indicated by a dot line represents an 
encrypted multiple information unit Ime obtained by 
encrypting the information units" luld, Iu2d, Iu3d, and 
Iu4d once in the lower layer scrambler 1913. In other 
words, all the information units Iu1d, Iu2d, Iu3d, and 
Iu4d are encrypted with the same cipher, and are pro- 
tected by the single encryption layer in the transporta- 
tion level. 

[0024] The information units Iu1d, Iu2d, Iu3d, and Iu4d 
represents a tourist resort guide considering the 
weather forecast, a weather forecast for the tourist 
resorts, a weather forecast for atlover the country, and a 
weather forecast for a local area, respectively. These 
sub-tiles with respect to weather forecast are encrypted 
to generate a total weather forecast program lue. Thus, 
there is no hierarchical order among these sub-tiles 
from the view point of encryption. 

In Operation 

[0025] With reference to Figs. 27 and 28, the opera- 
tion of the conventional information transmission appa- 
ratus 1900 is described below. In Fig. 27, a flow chart 
showing the operation performed by the transmitting 
unit 1910 and the transmitter 1920 is shown. 
[0026] At step S2001 , the information unit generator 
1911 generates a plurality of information units lu, and 
outputs the generated information units lu. Examples of 
the generation of the information units lu include a 
method in which a user enters information units lu and 
designates a file as in Example 1 , and a case where 
information units lu are selectively outputted from 
stored information units lu in accordance with a prede- 
termined schedule as in Example 2. 
[0027] At step S2002, the multiplexer 1912 multi- 
plexes the information units lu generated at step $2001 , 
and outputs the result thereof as multiple information 
Im. The multiple information Im is multipartite data con- 
forming to the MIME in the case of Example 1, while 
being data representing the TS of the MPEG-2 systems 
in the case of Example 2. 

[0028] At step S2003, the lower layer scrambler 1913 
encrypts the multiple information Im obtained by the 
multiplexing at step S2002, and produces the encrypted 



multiple information Ime. In Example 1, the multiple 
information Im is encrypted using the RSA cipher or the 
like. On the other hand, in Example 2, the payload por- 
tion of the TS of the MPEG-2 is encrypted using a 
5 MULTI2 cipher manufactured by Hitachi Ltd., for exam- 
ple. 

[0029] At step S2004, the sender 1914 converts the 
encrypted multiple information Ime obtained by the 
encryption at step S2003 into a format which is trans- 

10 mittable or suitable for transmission by the transmitter 
1920, and produces the transmission information It. In 
Example 1, information obtained by adding information, 
for example, "To : " field, "From : " field to the head of the 
text of the mail which is encrypted multiple information 

15 Ime is outputted as transmission information It. On the 
other hand, in Example 2, Information obtained by 
encoding the TS of the MPEG-2 using an error-correct- 
ing code and then, modulating the encoded TS is out- 
putted. 

20 [0030] At step S2005, the transmitter 1920 transmits 
the transmission information It to a physically distant 
point. In Example 1, the mail communication daemons 
mounted on one or a plurality of computers connected 
are communicated to a computer network such as the 

25 Internet or a LAN (Local Area Network) on the basis of 
the SMTP. Thus, the mail is transmitted from the mail 
communication daemon on one of the computers to the 
mail communication daemon on the other computer. 
[0031] On the other hand, in Example 2, transmission 

30 information It obtained by the conversion in the up-con- 
verter is transmitted to the communication satellite by 
the parabolic antenna. The communication satellite 
transmits the received transmission information It to the 
ground by a transponder. The transmission information 

35 It from the communication satellite is received by the 
ground receiving antenna. 

[0032] With reference to Fig. 28, the operation per- 
formed by the receiving unit 1930 is described, here 
below. In Fig. 28, the operations of taking out an infor- 
40 mation unit lu in real time from the transmission infor- 
mation It, presenting the information unit lu to the user, 
storing the information unit lu as required by the user, 
and later viewing the information unit lu again are spe- 
cifically shown. 

45 [0033] At step S21 01 , when the user views the infor- 
mation unit lu in real time from the transmission infor- 
mation It, the procedure advances to step S21 02. When 
the user views the information unit lu previously stored 
in the storage 1935, the procedure advances to step 

so S2109. 

[0034] At step S2102, the receiver 1931 receives the 
transmission information It from the transmitter 1920, 
and takes out a part or the whole of the encrypted mul- 
tiple information Ime from the inputted transmission 
55 information It. In Example 1, processing for taking out 
one electronic mail data addressed to a specific user is 
performed. On the other hand, in Example 2 t process- 
ing for filtering a particular packet storing information to 
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be found by a PID (Packet ID), and selecting and 
extracting the packet is performed by tuning to a prede- 
termined frequency. 

[0035] At step S2103, the lower layer descrambler 
1932 receives the encrypted multiple information Ime 
outputted by the receiver 1931. and decrypts the 
encrypted multiple information Ime, and outputs multi- 
ple information Im. In Example 1. the lower layer 
descrambler 1932 is the PGP program started with a 
decryption option. Decryption is performed using the 
RSA cipher by the PGP program, and the result of the 
decryption is outputted. On the other hand, in Example 
2, the multiple information Im encrypted using the 
MULTI2 cipher is decrypted, to obtain multiple informa- 
tion Im. 

[0036] At step S2104, the demultiplexer 1933 sepa- 
rates each information unit lu from the multiplexed infor- 
mation units Im and takes out the information unit lu. In 
Example 1, the demultiplexer 1933 separates for each 
part the multipartite message obtained by multiplexing 
on the basis of the MIME. As a result, the text informa- 
tion, the image information, the voice information, and 
so forth which are the respective parts are separated as 
discrete information units lu. 

[0037] On the other hand, in Example 2, the demulti- 
plexer ;1933 separates the plurality of streams multi- 
plexed by the MPEG-2 systems on the basis of a PID 
(Packet ID, a packet identifier). As a result additional 
information such as an MPEG-2 video stream, an 
MPEG-1 audio stream, and EPG are separated as dis- 
crete information units lu. An MPEG-2 video is stand- 
ardized by ITU-T H. 262, and a MPEG-1 audio is 
standardized as ISO/IEC 11172-3 Standard. 
[0038] At step S2105, the reproducer 1934 receives 
the information unit lu outputted by the demultiplexer 
1933, and produces the first reproduction information 
Ir1 which is reproducible information. In Example 1, 
when the information unit lu is text information, for 
example, fonts corresponding to respective character 
codes are selected and listed, to generate a bitmap for- 
mat as the reproduction information Ir1 . When the infor- 
mation unit lu is in an image information format such as 
JPEG (Joint Photographies Experts Group), it is 
expanded into the bitmap format, and the result of the 
expansion is outputted as reproduction information. The 
JPEG is standardized by ISO/IEC 10918. When the 
information unit lu is voice information, it is converted 
into an analog voice signal by the same function as that 
of a digital-to-analogue (D/A) converter. And the analog 
voice signal is also outputted as reproduction informa- 
tion. 

[0039] On the other hand, in Example 2, when the 
information unit lu obtained at step S2104 is the MPEG- 
2 video stream, the MPEG-2 video is decoded, and out- 
puts the NTSC signal as reproduction information. 
When the information unit lu is a voice stream, it is con- 
verted into an analog voice signal by D/A conversion, 
and the analog voice signal is outputted. 



[0040] At step S2106, the presenter 1 936 presents the 
first reproduction information Ir1 obtained at step S2105 
to the user in accordance with the format of the repro- 
duction information. In Example 1 , when the reproduc- 

5 tion information obtained at step S21 05 is in the bitmap 
format, the presenter 1936 arranges and presents the 
reproduction information Irl on a display screen. Thus," 
the reproduction information Irl is presented to the user. 
When the reproduction information obtained at step 

10 S2105 is an analog voice signal, the analog voice signal 
is converted into sound by being sent to a speaker, and 
. is visually presented to the user. 
[0041] On the other hand, in Example 2, an NTSC sig- 
nal as the reproduction information which is obtained at 

is step S2105 is received on a display the analog voice 
information is sent to a speaker, and the reproduction 
information is presented to the user. 
[0042] At step S21 07, the procedure advances to step 
S2108 in a case where an attempt to store information 

20 in the current transmission information It is made by 
presenting the intention of the user, while proceeding to 
step S2101 in the other case. Specific examples of a 
case where the intention of the user is presented 
include a case where it is designated while being 

25 viewed and a case where it is previously set by a timer 
or the like. 

[0043] At step S2108, the reproduction information 
generated at step S2105 is stored in the storage 1935. 
Thereafter, the procedure advances to step S2101. 

30 Reproduction information Irl may be additionally stored 
in the storage 1935, or the information Irl already 
stored may be overwritten by the additionally stored 
information Irl . Alternatively, in a case where informa- 
tion with an old version has been already stored in the 

35 storage 1935, the information with an old version may 
be replaced. 

[0044] In Example 1, the reproduction information is 
stored and arranged in a file system. The information 
units lu are arranged in the order of arrival, by sending 

40 person, and by topic, for example. On the other hand, in 
Example 2, the reproduction information such as 
images and voices is recorded on a video tape or the 
like. For example, additional information other than 
images and voices which are multiplexed in_a NTSC 

45 vertical blanking period may be simultaneously stored. 
In a case where digital information is recorded as it is, a 
plurality of streams other than images and voices may 
be simultaneously recorded. 

[0045] At step S2109, the first reproduction informa- 
50 tion Irl stored in the storage .1935 is outputted there- 
from as the second reproduction information Ir2. In 
Example 1, the reproduction information Ir2 (Ir1) 
selected by the user out of the reproduction information 
Irl arranged and stored in the file system is outputted. 
55 On the other hand, in Example 2, images and voices are 
reproduced from the video tape or the like. Although the 
selection of the reproduction information Ir2 (Irl > which 
the user desires to select may be automated by being 
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realized as the function of the storage 1935, the user 
himself or herself may also selects the video tape or the 
like and set the selected video tape in the storage 1 935. 
[0046] At step S2 1 1 0, the presenter 1 936 presents the 
reproduction information outputted at step S2 1 09 to the s 
user Thereafter, the procedure returns to step S2101. 
The operation at step S21 1 0 may be the same as that at 
step S2106 except that the procedure returns to step 
S2101. 

[0047] However, as described in the above, the con- 10 
ventional information transmission apparatus 1900 
faces to the following two main problems. The first prob- 
lem is that there is a restriction on the degree of free- 
dom to setting the resistance of a cipher against unfair 
decryption. In general, the higher the resistance of the is 
cipher to unfair decryption is, the more resources such 
as computer resources and processing time are 
required for decryption processing performed by a fair 
decrypting method. Therefore, encryption using a 
cipher having necessary and sufficient resistance is 20 
required depending on secrecy required of an object to 
be encrypted. 

[0048] For example, when encryption higher in 
secrecy is required of an information unit lu which is a 
part of information to be transmitted, the information 25 
unit lu which is the part must be subjected to encryption 
using a cipher having higher resistance. For example, 
when in a weather forecast program, a weather forecast 
for allover the country is free and is not encrypted. How- 
ever, a detailed forecast for the local area is charged, 30 
and a weather forecast custom-maid for each user is 
charged extra. Therefore, the detailed forecast for the 
local area must be subjected to encryption higher in 
secrecy than the weather forecast for allover of the 
country, and the custom-made weather forecast must 35 
be subjected to encryption higher in secrecy than the 
detailed forecast for the local area. 
[0049] Although in many of ciphers, the resistance of 
the cipher can be theoretically adjusted by increasing 
the size of a key of cryptanalysis, the resistance of the 40 
cipher does not necessarily have a sufficient degree of 
freedom due to the restriction on hardware for decryp- 
tion generally used, for example. 
[0050] When the hardware for decryption using a 
cipher having an increased degree of freedom is used, 45 
however, some disadvantages occur. For example, a 
receiving unit 1930 becomes complicated, and special 
hardware must be prepared. In a case where a key is 
changed for information units lu encrypted using 
ciphers which differ in resistance, encryption and so 
decryption must be performed for each information unit 
lu in the worst case, which is not efficient. 
[0051 ] The second problem is that the information unit 
lu must be decrypted before it is stored. In general, 
when charged information is sent in a media which can 55 
be accessed by all people, for example, such as broad- 
casting. In such a charged broadcasting, information is 
transmitted in an encrypted state in a transmitting unit 



1910, and fees are charged at the time point where the 
information is decrypted in a receiving unit 1930 in 
many cases. This is for preventing unfair viewing of 
users who do not pay fees. 

[0052] It is necessary for the conventional information 
transmission apparatus 1900 to store the reproduction 
information Ir which is generated by decrypting the 
transmission information It produced by encrypting the 
information unit lu sent from the transmitting unit 1910 - 
before the user views the information unit lu not in real 
time but some time after transmission. Let consider a 
case where information units lu which may be viewed 
are previously stored and are later viewed. 
[0053] When a relatively large number of information 
units lu which may be later viewed are stored, some of 
the information units lu are not eventually viewed even if 
they have been decrypted from the transmission infor- 
mation It. In a case where fees are charged at the same 
time that the information units lu are descrambled when 
they are stored, it is disadvantageous for a user. Con- 
versely, when a relatively small number of information 
units lu which are to be always later viewed are carefully 
selected and stored, an information unit lu cannot be 
viewed even when a user desires to view the informa- 
tion unit lu later because it is not stored. The reason for 
this is that generally it is significantly difficult for the user 
himself or herself to previously determine which of the 
information units lu will be later viewed. 
[0054] On the other hand, a method of changing the 
structure of the receiving unit and storing transmission 
information It as it is also considered. In this method, 
when additional information such as EPG having the 
same content are repeatedly sent, such information is 
overlapped with each other. Furthermore, the informa- 
tion units lu including old and new contents are both 
stored regardless the version thereof, even though the 
newest one of them, for example, the number of survi- 
vors in a plane accident and software whose version is 
updated, is worthwhile. Therefore, the capacity of the 
storage is wasted, which is not realistic, and excess 
processing is required in taking out the newest informa- 
tion unit lu. 

SUMMARY OF THE INVENTION 

[0055] The present invention has been made to solve 
the above-described conventional problems. At first 
aspect of the present invention, an information trans- 
mission apparatus in use for an information transmis- 
sion system where an encrypted information comprised 
of a plurality of information units each hierarchically 
encrypted and multiplexed to each other is communi- 
cated between at least two parties, the information 
being encrypted for the transmission, the apparatus 
comprises: 

an information unit generator for producing the 
information unit; 



_09Q3886A2_L> 



11 



EP0903 886A2 



12 



a first encryption unit for encrypting the information 
unit with a first predetermined encryption system to 
produce an encrypted information unit; and 
a first multiplexer for multiplexing at least one of the 
information unit and the encrypted information unit 
to produce a multiplexed information unit. 

[0056] As apparently from the above, according to the 
first aspect of the present invention, it is possible to pro- 
duce the encrypted information comprised of a plurality 
of information units which are hierarchically encrypted 
and multiplexed to each other in various combination. 
[0057] According to a second aspect, in the first 
aspect of the present invention, an information trans- 
mission apparatus further comprises: 

a second encryption unit for encrypting the multiple 
information with a second predetermined encryp- 
tion system to produce the encrypted multiplexed 
information; and 

a second multiplexer for multiplexing the encrypted 
information unit to produce the multiplexed informa- 
tion. 

[0058] As apparently from the above, according to the 
second aspect of the present invention, it is possible to 
encrypt each of information units with different encryp- 
tion system, ensuring the encryption resistance against 
unfair access the information. 

[0059] According to a third aspect, in the second 
aspect of the present invention, an information trans- 
mission apparatus further comprises: 

a third encryption unit for encrypting the multiplexed 
information with a third predetermined encryption 
system to produce an encrypted multiple informa- 
tion unit. 

[0060] According to a fourth aspect, in the third aspect 
of the present invention, an information transmission 
apparatus, wherein the third predetermined encryption 
system is the same as that applied to the encrypted 
information. 

[0061] According to a fifth aspect, in the third aspect 
of the present invention, an information transmission 
apparatus, where in the second predetermined encryp- 
tion system is the same as the third predetermined 
encryption system. 

[0062] According to a sixth aspect, in the third aspect 
of the present invention, an information transmission 
apparatus, where in the first, second, and third prede- 
termined encryption systems are the same. 
[0063] According to a seventh aspect, in the first 
aspect of the present invention, an information trans- 
mission apparatus further comprises: 

a transmitter for converting the encrypted multi- 
plexed information into a format suitable for an effi- 



cient transmission. 

[0064] According to an eighth aspect, in the first 
aspect of the present invention, an information trans- 

s mission apparatus,' wherein the first encryption unit 
encrypts the information unit with an encryption system 
suitable for the transmission of information. 
[0065] According to an eighth aspect, an information 
transmission apparatus in use for an information trans- 

w mission system where an encrypted information com- 
prised of a plurality of information units each 
hierarchically encrypted and multiplexed to each other 
is communicated between at least two parties, the infor- 
mation being encrypted for the transmission, the appa- 

15 ratus comprising: 



20 



25 



30 



35 



40 



50 



a first decryption unit for decrypting the encrypted 
information with a first decryption system to pro- 
duce a first multiplexed information unit; 
a first demultiplexer for demultiplexing the first mul- 
tiplexed information unit into any of a first encrypted 
information unit, a second multiplexed information 
unit and the information unit; and 
a second decryption unit for decrypting the first 
encrypted information unit with a second decryption 
system to produce the information unit or a second 
encrypted information unit. 

[0066] According to a tenth aspect, in the ninth aspect 
of the present invention, an information transmission 
apparatus further comprising: 

a second demultiplexer for demultiplexing the sec- 
ond multiplexed information unit; 
a third decryption unit for decrypting the second 
encrypted information unit with a third predeter- 
mined decryption system to produce the informa- 
tion unit. 



[0067] According to an eleventh aspect, in the ninth 
aspect of the present invention, an information trans- 
mission apparatus, wherein the first decryption system 
is the same as that applied to the encrypted information. 
[0068] According to a twelve aspect, in the first aspect 
45 of the present invention, an information transmission 
apparatus further comprises: 



a storage provided between the first demultiplexer 
and the second decryption unit for storing any of the 
first and second encrypted information units. 



55 



[0069] According to a thirteenth aspect, in the twelve 
aspect of the present invention, an information trans- 
mission apparatus further comprises: 

a reproducer for receiving the encrypted informa- 
tion units from the second decryption unit to pro- 
duce a reproduction information indicating a 
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content the encrypted information, the reproducer 
requesting the storage to supply the stored encryp- 
tion information unit to the second decryption unit. 

[0070] According to a fourteenth aspect of the present 
invention, an information transmission method for trans- 
mitting an encrypted information comprised of a plural- 
ity of information units each hierarchically encrypted 
and multiplexed to each other is communicated 
between at least two parties, the information being 
encrypted for the transmission, the method comprising 
the steps of: 

producing the information unit; 
^ encrypting the information unit with a first predeter- 
mined encryption system to produce an encrypted 
information unit; and 

multiplexing at least one of the information unit and 
the encrypted information unit to produce a multi- 
plexed information unit. 

[0071 ] As apparently from the above, according to the 
fourteenth aspect of the present invention, it is possible 
to produce the encrypted information comprised of a 
plurality of information units which are hierarchically 
encrypted and multiplexed to each other in various com- 
bination. 

[0072] According to a fifteenth aspect, in the four- 
teenth aspect of the present invention, an information 
transmission method further comprising the steps of: 

encrypting the multiple information with a second 
predetermined encryption system to produce the 
encrypted multiplexed information; and 
multiplexing the encrypted information unit to pro- 
duce the multiplexed information. 

[0073] As apparently from the above, according to the 
fourteenth aspect of the present invention, it is possible 
to encrypt each of information units with different 
encryption system, ensuring the encryption resistance 
against unfair access the information. 
[0074] According to a sixteenth aspect, in the fifteen 
aspect of the present invention, an information trans- 
mission method further comprises: 

encrypting the multiplexed information with a third 
predetermined encryption system to produce an 
encrypted multiple information unit. 

[0075] According to a seventeenth aspect, in the six- 
teenth aspect of the present invention, an information 
transmission method, wherein the third predetermined 
encryption system is the same as that applied to the 
encrypted information. 

[0076] According to an eighteenth aspect, in the six- 
teenth aspect of the present invention, an information 
transmission method, wherein the second predeter- 



mined encryption system is the same as the third prede- 
termined encryption system. 

[0077] According to a nineteenth aspect, in the six- 
teenth aspect of the present invention, an information 
5 transmission method, wherein the first, second, and 
third predetermined encryption systems are the same. 
[0078] According to a twentieth aspect, in the four- 
teenth aspect of the present invention, an information 
transmission method further comprising the step of: 

10 

converting the encrypted multiplexed information 
into a format suitable for an efficient transmission. 

[0079] According to a twenty first aspect, in the four- 
15 teenth aspect of the present invention, an information 
transmission method, wherein at the encrypting step 
the information unit is encrypted with an encryption sys- 
tem suitable for the transmission of information. 
[0080] According to a twenty second aspect of the 
20 present invention, an information transmission method 
for transmitting an encrypted information comprised of a 
plurality of information units each hierarchically 
encrypted and multiplexed to each other is communi- 
cated between at least two parties, the information 
25 being encrypted for the transmission, the method com- 
prising the steps of: 

decrypting the encrypted information with a first 
decryption system to produce a first multiplexed 
30 information unit; 

demultiplexing the first multiplexed information unit 
into any of a first encrypted information unit a sec- 
ond multiplexed information unit and the informa- 
tion unit; and 

35 decrypting the first encrypted information unit with a 
second decryption system to produce the in format 
ion unit or a second encrypted information unit. 

[0081] According to a twenty third aspect, in the 
40 twenty second aspect of the present invention, an infor- 
mation transmission method further comprising the 
steps of: 

demultiplexing the second multiplexed information 
45 unit; 

decrypting the second encrypted information unit 
with a third predetermined decryption system to 
produce the information unit. 

so [0082] According to a twenty fourth aspect, in the 
twenty second aspect of the present invention, an infor- 
mation transmission apparatus, wherein the first 
decryption system is the same as~that applied to the 
encrypted information. 

55 [0083] According to a twenty fifth aspect, in the four- 
teenth aspect of the present invention, an information 
transmission apparatus further comprising the step of: 
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storing any of the first and second encrypted infor- 
mation units. 

[0084] According to a twenty sixth aspect, in the 
twenty fifth aspect of the present invention, an informa- s 
tion transmission apparatus further comprising the step 
of: 

a reproducer for receiving the encrypted informa- 
tion units from the second decryption unit to pro- 10 
duce a reproduction information indicating a 
content the encrypted information, the reproducer 
requesting the storage to supply the stored encryp- 
tion information unit to the second decryption unit. 

15 

[0085] According to a twenty seventh aspect of the 
present invention, an information transmission system 
for transmitting an encrypted information comprised of a 
plurality of information units each hierarchically 
encrypted and multiplexed to each other is communi- 20 
cated between at least two parties, the information 
being encrypted for the transmission, the system com- 
prises: 

an information unit generator for producing the 25 
* information unit: 

a first encryption unit for encrypting the information 
unit with a first predetermined encryption system to 
produce an encrypted information unit; 
a first multiplexer for multiplexing at least one of the 30 
information unit and the encrypted information unit 
to produce a multiplexed information unit; 
a first decryption unit for decrypting the encrypted 
information with a first decryption system to pro- 
duce a first multiplexed information unit; 35 
a first demultiplexer for demultiplexing the first mul- 
tiplexed information unit into any of a first encrypted 
information unit, a second multiplexed information 
unit and the information unit; and 
a second decryption unit for decrypting the first 40 
encrypted information unit with a second decryption 
system to produce the information unit or a second 
encrypted information unit. 

[0086] As apparently from the above, according to the 45 
twenty seventh aspect of the present invention, it is pos- 
sible to produce the encrypted information comprised of 
a plurality of information units which are hierarchically 
encrypted and multiplexed to each other in various com- 
bination. It is also possible to reproduce the information so 
from thus hierarchically encrypted and multiplexed infor- 
maion. 

[0087] According to a twenty eighth aspect, in the 
twenty seventh aspect of the present invention, an infor- 
mation transmission system further comprises: 55 

a second encryption unit for encrypting the multiple 
information with a second predetermined encryp- 



tion system to produce the . encrypted multiplexed 
information; and 

a second multiplexer for multiplexing the encrypted 
information unit to produce the multiplexed informa- 
tion. 

[0088] As apparently from the above, according to the 
twenty eighth aspect of the present invention, it is possi- 
ble to encrypt each of information units with different 
encryption system, ensuring the encryption resistance 
against unfair access the information. 
[0089] According to a twenty ninth aspect, in the 
twenty eighth aspect of the present invention, an infor- 
mation transmission system further comprising: 

a third encryption unit for encrypting the multiplexed 
information with a third predetermined encryption 
system to produce an encrypted multiple informa- 
tion unit. " 

[0090] According to a thirtieth aspect, in the twenty 
ninth aspect of the present invention, an information 
transmission system, wherein the third predetermined 
encryption system is the same as that applied to the 
encrypted information. 

[0091 ] According to a thirty first aspect, in the twenty 
ninth aspect of the present invention, an information 
transmission system, wherein the second predeter- 
mined encryption system is the same as the third prede- 
termined encryption system. 

[0092] According to a thirty second aspect, in the 
twenty ninth aspect of the present invention, an informa- 
tion transmission system, wherein the first, second; and 
third predetermined encryption systems are the same. 
[0093] According to a thirty third aspect, in the twenty 
seventh aspect of the present invention, an information 
transmission system further comprising: 

a transmitter for converting the encrypted multi- 
plexed information into a format suitable for an effi- 
cient transmission. 

[0094] According to a thirty fourth aspect, in the 
twenty seventh aspect of the present invention, an infor- 
mation transmission system, wherein the first encryp- 
tion unit encrypts the information unit with an encryption 
system suitable for the transmission of information. 
[0095] According to a thirty fifth aspect, in the twenty 
seventh aspect of the present invention, an information 
transmission system further comprises: 

a second demultiplexer for demultiplexing the sec- 
ond multiplexed information unit; 
a third decryption unit for decrypting the second 
encrypted information unit with a third predeter- 
mined decryption system to produce the informa- 
tion unit. 
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[0096] Acoording to a thirty sixth aspect, in the twenty 
seventh aspect of the present invention, an information 
transmission system, wherein the first decryption sys- 
tem is the same as that applied to the encrypted infor- 
mation. 

[0097] According to a thirty seventh aspect, in the 
twenty seventh aspect of the present invention, an infor- 
mation transmission system apparatus further com- 
prises: 

a storage provided between the first demultiplexer 
and the second decryption unit for storing any of the 
first and second encrypted information units. 

[0098] According to a thirty eighth aspect, in the thirty 
aspect of the present invention, an information trans- 
mission system further comprises: 

a reproducer for receiving the encrypted informa- 
tion units from the second decryption unit to pro- 
duce a reproduction information indicating a 
content the encrypted information, the reproducer 
requesting the storage to supply the stored encryp- 
tion information unit to the second decryption unit. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0099] 

Fig. 1 is a block diagram showing an information 
transmission apparatus according to a first embod- 
iment of the present invention, 
Fig. 2 is a graph in assistance of explaining an 
encrypted multiple information unit produced by the 
information transmission apparatus of Fig. 1 , 
Fig. 3 is a flow chart showing operations performed 
by the transmitting unit and transmitter in the infor- 
mation transmission apparatus of Fig. 1 , 
Fig. 4 is a flow chart showing operations performed 
by the receiving unit in the information transmission 
apparatus according of Fig. 1. 
Fig. 5 is a block diagram showing an information 
transmission apparatus according to a second 
embodiment of the present invention, 
Fig. 6 is a graph in assistance of explaining an 
encrypted multiple information unit produced by the 
information transmission apparatus of Fig. 5, 
Fig. 7 is a flow chart showing operations performed 
by the transmitting unit and transmitter in the infor- 
mation transmission apparatus of Fig. 5, 
Fig. 8 is a flow chart showing operations performed 
by a receiving unit in the information transmission 
apparatus of Fig. 5, 

Fig. 9 is a block diagram showing an alternative of 
the information transmission apparatus of Fig. 5, 
Fig. 10 is a block diagram showing an information 
transmission apparatus according to a third embod- 
iment of the present invention. 



Fig. 11 is a graph in assistance of explaining an 
encrypted multiple information unit produced by the 
information transmission apparatus of Fig. 10, 
Fig. 12 is a flow chart showing operations per- 

5 formed by a receiving unit in the information trans- 
mission apparatus of Fig. 10, 
Fig. 1 3 is a block diagram showing an alternative of 
the information transmission apparatus of Fig. 10. 
Fig. 14 is a block diagram showing an information 

w transmission apparatus according to a fourth 
embodiment of the present invention, 
Fig. 15 is a flow chart showing operations per- 
formed by a transmitting unit and transmitter in the 
information transmission apparatus of Fig. 14, 

15 Fig. 16 is a flow chart showing operations per- 
formed by a receiving unit in the information trans- 
mission apparatus of Fig. 14, 
Fig. 17 is a flow chart showing operations per- 
formed by storage in the information transmission 

20 apparatus of Fig. 14, 

Fig. 18 is a block diagram showing an information 
transmission apparatus according to a fifth embod- 
iment of the present invention, 
Fig. 19 is a flow chart showing operations per- 

25 formed by a transmitting unit and transmitter in the 
information transmission apparatus of Fig. 18, 
Fig. 20 is a flow chart showing operations per- 
formed by a receiving unit in the information trans- 
mission apparatus of Fig. 18, 

30 Fig. 21 is a block diagram showing an alternative of 
the information transmission apparatus of Fig. 18, 
Fig. 22 is a block diagram showing an information 
transmission apparatus according to a sixth 
embodiment of the present invention, 

35 Fig. 23 ~is a flow chart showing operations per- 
formed by a receiving unit in the information trans- 
mission apparatus of Fig. 22, 
Fig. 24 is a block diagram showing an alternative of 
the information transmission apparatus of Fig. 22, 

40 Fig. 25 is a block diagram showing a conventional 
information transmission apparatus, 
Fig. 26 is a graph in assistance of an encrypted 
multiple information unit produced by the informa- 
tion transmission apparatus of Fig. 25, 

45 Fig. 27 is a flow chart showing operations per- 
formed by the transmitting unit and transmitter in 
the information transmission apparatus of Fig. 25, 
and 

Fig. 28 is a flow chart showing operations per- 
50 formed by a receiving unit in the information trans- 
mission apparatus of Fig. 25. 

DESCRIPTION OF THE PREFERRED EMBODI- 
MENTS 

55 

[0100] Preferred embodiments according to the 
present invention are described in detail with reference 
to the attached drawings Figs. 1 to 24. 
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(First Embodiment) 

[0101] With reference to Figs. 1 to 3. here below, an 
information transmission apparatus according to a first 
embodiment of the present invention is described. s 
Description is now made by taking two types of specific 
examples, those are information transmission in the 
Internet as Example 1 and digital broadcasting as 
Example 2. The information transmission apparatus 
100 includes a transmitting unit 110, transmitter 120, 10 
and a receiving unit 130. 

Transmitting unit 110 

[0102] The transmitting unit 1 10 includes information 15 
unit generator 1 1 1 , an information unit scrambler 1 12, a 
multiplexer 113, a lower layer scrambler 114, and, a 
sender 115. The information unit generator 1 1 1 gener- 
ates a plurality of information units lu, and outputs 
thereof. In Example 1, the information unit generator 20 
1 1 1 outputs the information units lu which are, for exam- 
ple, a text the user entered with a keyboard or the like, 
and an image taken into a computer, and others already 
stored in the computer. The information unit generator 
1 1 1 may be an input screen portion of electronic mail 25 
software, and a server in a broadcasting station on the 
Internet, for example. 

(0103] On the other hand, in Example 2, ail informa- 
tion units lu generated are previously stored in the infor- 
mation unit generator 111. A method for merely 30 
selectively outputting the information units lu in accord- 
ance with a predetermined schedule is considered. The 
information unit generator 111 is a broadcasting station 
system containing a program management system in a 
sending system of digital broadcasting, a cart machine 35 
of a VTR, an MPEG-2 encoder, an EPG (Electronic Pro- 
gram Guide) management sending system of digital 
broadcasting, and the like. Additional information such 
as EPG must be sent out with the same contents 
thereof maintained for a long time. Therefore, the same 40 
contents may, in some cases, are repeatedly outputted 
in a period on the order of seconds in the information 
unit generator 111. 

[0104] The information unit scrambler 112 is con- 
nected to the information unit generator 111 for receiv- 45 
ing the information unit lu therefrom to encrypt the 
inputted information units lu. Then the information unit 
scrambler 112 outputs the result of encryption as an 
encrypted information units lue. An object to be 
encrypted once is a set having elements which are so 
information units lu or the results of the encryption. The 
encrypted information unit lue shall be defined as fol- 
lows. 



information unit lue. 

Definition 3: The result of encrypting an encrypted 
information unit lue is also an encrypted informa- 
tion unit lue. 

[0105] The multiplexer 1 13 is connected to the infor- 
mation unit generator 111 and the information unit 
scrambler 112 for receiving the information unit lu and 
the encrypted information unit, respectively, therefrom. 
Then, the multiplexer 113 multiplexes the information 
received from the information unit generator 1 1 1 and/or 
the information unit scrambler 112, and outputs the mul- 
tiplexed result as a multiple information unit Im there- 
from. 

[01 06] The multiplexer 1 1 3 is further connected to the 
output port thereof for receiving the multiple information 
Im produced thereby to multiplex again. Furthermore, 
the output port of the multiplexer 1 13 is also connected 
to the input port of the information unit scrambler 1 12, 
so that the information unit scrambler 112 can encrypts 
the multiple information unit Im to produce the 
encrypted information unit lue. 

[0107] Thus, the multiplexer 113 handles the 
encrypted information units lue outputted by the infor- 
mation unit scrambler 1 12 as objects to be multiplexed, 
similarly to the information units lu outputted by the 
information unit generator 111. The encrypted informa- 
tion units iue handed at a time by the information unit 
scrambler 1 12 are handled upon being considered to be 
equal to one information unit lu. The multiplexer 113 
may add the information units lu outputted from the 
information unit generator 1 1 1 to the encrypted informa- 
tion units lue previously inputted from the information 
unit scrambler 1 1 2, and multiplex them. 
[0108] Specifically, the multiplexer 113 receives the 
plurality of information units lu outputted by the informa- 
tion unit generator 111. Then, the multiplexer 113 multi- 
plexes the inputted information units lu, and outputs the 
multiplexed information units lue as multiple information 
Im. By the multiplexing, the plurality of information units 
lu are converted into a format (multiple information Im) 
suitable for efficient transmission in the transmitter 120. 
[0109] In Example 1, the multiplexer 1 13 is an MIME 
(Multi-purpose Internet Mail Extensions) encoder used 
for sending multimedia information by an electronic mail 
on the Internet, for example. In this case, the multiplexer 
113 respectively takes text information, image informa- 
tion, voice information, and so forth which are the plural- 
ity of information units lu as parts. Then the multiplexer 
113 converts the parts into a multipartite message con- 
forming to MIME for collecting the plurality of parts, and 
outputs the message. The formal specification of the 
MIME is defined by RFC (Request for Comments) 
1521/1522. 

[0110] On the other hand, in Example 2, the multi- 
plexer 113 is a service multiplexer for obtaining TS 
(Transport Stream) of an MPEG-2 systems from a plu- 
rality of stream data, for example. The MPEG-2 systems 



Definition 1 : The encrypted information unit lue is 55 
also an information unit lu. 
Definition 2: A set of information units lu or 
encrypted information units lu is also an encrypted 
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and the TS are standardized by ISO/IEC CD 13818-1. 
In this case, the multiplexer 1 13 divides each of the plu- 
rality of information units lu outputted by the information 
unit generator 1 1 1 into packets called PES (Packetized 
Elementary Stream), and multiplexes the obtained 
packets on the basis of a predetermined rule. 
[0111] The lower layer scrambler 1 14 is connected to 
the multiplexer 1 13 for receiving the multiple information 
Im therefrom to encrypt thereof. Then, the lower layer 
scrambler 114 outputs the encryption result as the 
encrypted multiple information Ime therefrom. Specifi- 
cally, the lower layer scrambler 114 receives the multiple 
information Im outputted by the multiplexer 113, and 
encrypts the multiple information Im in accordance with 
a predetermined encryption algorithm. Then, the lower 
layer scrambler 114 outputs the encrypted result as 
encrypted multiple information Ime. 
[0112] In Example 1, the lower layer scrambler 114 
may be software PGP (Pretty Good Privacy) on which 
an RSA cipher which is a public key cipher, for example, 
mounted therein is started with an encryption option. An 
output of the lower layer scrambler 1 14 is a text of an 
electronic mail encrypted using the RSA cipher. The 
RSA cipher is described in detail in an article entitled by 
R. L. Rivest, A. Shamir, and L. Adleman which are con- 
trivers themselves "A Method for Obtaining Digital Sig- 
natures and Public Key Cryptosystems" (Vol. 21. No. 2 
issued on February, 1978 in Communications of the 
ACM). The PGP is described in detail in an article enti- 
tled by Simson Garfinkel "PGP: Pretty Good Privacy* 
(O'Reilly & Associates). 

[0113] On the other hand, in Example 2, the lower 
layer scrambler 1 14 may be, for example, a scrambler of 
a transport layer. The lower layer scrambler 114 
encrypts a payload portion of inputted TS of MPEG-2 
using an encryption algorithm such as MULTI2, and out- 
puts the encrypted TS of the MPEG-2 which is the result 
thereof. 

[01 1 4] The sender 1 1 5 is connected to the lower layer 
scrambler 1 14 for receiving the encrypted multiple infor- 
mation Ime therefrom to produce the transmission infor- 
mation It, and outputs produced transmission 
information It therefrom. Specifically, the sender 115 
converts the encrypted multiple information Ime output- 
ted from the lower layer scrambler 114 into the transmis- 
sion information It which will be inputted to the 
transmitter 120. 

[01 1 5] In Example 1 , the sender 1 1 5 is a program for 
adding a mail header composed of a destination field, a 
sender field, and so forth to the text of the electronic 
mail. An output of the sender 1 1 5 is the text of the elec- 
tronic mail to which the mail header is added. On the 
other hand, in Example 2, the sender 115 is an error- 
correcting encoder and a modulator for the TS of the 
MPEG-2. 



Transmitter 12Q 

[01 1 6] The transmitter 120 receives the transmission 
information rt outputted by the sender 1 15, and trans- 

5 mits the transmission information It to a physically dis- 
tant point. Both inputs and outputs of the transmitter 120 
are the transmission information It. All the inputs of the 
transmitter 120 may not appear in the outputs to the 
receiving unit 130 without any error. In Example 1, the 

10 transmitter 1 20 is a plurality of mail communication dae- 
mons which are connected to each other by a channel 
such as the Internet for interpreting and executing an 
SMTP (Simple Mail Transfer Protocol). Examples of the 
typical mail communication daemon include "sendmair. 

is The formal specification of the SMTP is defined by RFC 
821, RFC 822, and RFC 974. The sendmail is 
described in detail in an article entitled by E. Aliman 
""SENDMAIL - An Internetwork Mail Router" Unix Pro- 
grammer's manual" (CSRG U. C. Berkeley issued on 

20 July, 1983). 

[01 17] On the other hand, in Example 2, the transmit- 
ter 120 is constituted by an up-converter, a parabola 
antenna for sending data to a satellite, a communication 
satellite, and a ground receiving antenna. 

25 

R eceivin g unit 130 

[01 18] The receiving unit 130 receives the transmis- 
sion information It from the transmitter 120. Then, the 

30 receiving unit 130 variously processes the transmission 
It to reproduce the information unit lu included therein, 
and finally presents the reproduction information Ir 
which is the contents of information unit lu to a user. The 
receiving unit 130 includes receiver 131, a lower layer 

35 descrambier 132, demultiplexer 133, an information unit 
descrambler 134, reproducer 135, and presenter 136. 
[0119] The receiver 131 is connected to the transmit- 
ter 120 for receiving the transmission information It 
therefrom, and produces the encrypted multiple infor- 

40 mation Ime. Specifically, the receiver 131 receives the 
transmission information It outputted by the transmitter 
120, and takes out the whole or a part of thereof, then, 
the receiver 131 produces the encrypted multiple infor- 
mation Ime based on the transmission information It. 

45 [0120] In Example 1, the receiver 131 is a front end 
program for mail transmission. On the other hand, in 
Example 2, the receiver 131 is the connection of a sat- 
ellite broadcasting tuner, a demodulator and an error- 
correcting decoder. 

so [01 21 ] The lower layer descrambler 1 32 is connected 
to the receiver 131 for receiving the encrypted multiple 
information Ime therefrom, and produces the multiple 
information Im. The lower layer descrambler 132 
receives the encrypted multiple information Ime output- 

55 ted by the receiver 131, and decrypts the encrypted 
multiple information Ime, and produces the multiple 
information Im. In Example 1 , the lower layer descram- 
bler 132 is a PGP program which is started with a 
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decryption option. On the other hand, in Example 2, the 
lower layer descrambler 132 is a descrambler of the 
transport layer. 

[0122] Note that, the encrypted multiple information 
Ime produced by the lower layer descrambler 132 is 
substantially the same In content as the encrypted mul- 
tiple information Ime produced by the lower layer scram- 
bler 1 14 of the transmitting unit 1 10, but can be different 
in the encrypting format or encrypting method. Of 
course, it is also possible to reproduce the completely 
same encrypted multiple information Ime as that pro- 
duced by the lower layer scrambler 1 1 4. 
[0123] The demultiplexer 133 is connected to the 
lower layer descrambler 132 for receiving the multiple 
information Im therefrom. The demultiplexer 133 sepa- 
rates the encrypted information unit lue from the multi- 
ple information Im, and outputs the separated 
encrypted information unit lue therefrom. When the 
information decrypted from the multiple information 
includes the information unit lu which does not need the 
decryption, the demultiplexer 133 outputs the encrypted 
information unit lue and the information unit lu, sepa- 
rately. 

[0124] Specifically, in Example 1. the demultiplexer 
133 is an MIME decoder, and separates the text infor- 
mation, the image information, and so forth which are 
the respective parts included in the multipartite mes- 
sage as separate information, to take out the separate 
information. On the other hand, in Example 2, the 
demultiplexer 133 is a demultiplexer for the TS of the 
MPEG-2. The demultiplexer 133 separates a plurality of 
streams which are multiplexed by the MPEG-2 systems. 
[0125] The information unit descrambler 134 is con- 
nected to the demultiplexer 133 for receiving only the 
encrypted information unit lue therefrom. Then, the 
information unit descrambler 1 34 decrypts the received 
encrypted information unit lue to produce the informa- 
tion unit lu. However, when the encrypted information 
unit lue is a multiple encrypted information unit such as 
those repeatedly encrypted by the information unit 
scrambler 112, or repeatedly multiplexed by the multi- 
plexer 1 13, as described in the above. 
[0126] In the former case that the encrypted informa- 
tion unit Im has been repeatedly encrypted by the 
scrambler 112. another encrypted information unit lue 
still remains even after decryption by the information 
unit descrambler 134 itself. The information unit 
descrambler 134 outputs such remained encrypted 
information unit lue and information unit lu separately 
from discrete output ports, respectively. For decrypting 
such remained encrypted information unit lue. the infor- 
mation unit descrambler 1 34 is further connected to one 
of output ports thereof for returning the remained 
encrypted information unit lue thereto. The information 
unit descrambler 134 repeats this feed back operation, 
until the remained encrypted information unit lue does 
not appear after decryption thereby. 
[01 27] In the latter case that the encrypted information 



unit lue has been repeatedly multiplexed by the multi- 
plexer 113, another multiple information unit Im still 
remains therein even after demultiplexing by the demul- 
tiplexer 133. Since such remained multiple information 

5 unit is hierarchically multiplexed and encrypted, it is 
necessary first to decrypt the outer shell of remained 
encrypted (repeatedly multiplexed) information unit lue 
before decryption by the information unit descrambler 
134 itself. Therefore, such remained multiplexed 

10 encrypted (repeatedly multiplexed) information lue is 
returned to the demultiplexer 133. Resultantly, repeated 
demultiplexing by the demultiplexer 133 and/or decryp- 
tion by descrambler 134 continues till no multiple infor- 
mation unit Im but decrypted information unit lu remains 

7 5 after decryption. Then, the information unit descrambler 
134 outputs only the information unit 1 therefrom. 
[0128] Specifically, the information unit descrambler 
134 receives the encrypted information unit lue output- 
ted by the information unit descrambler 134. Then, the 

20 information unit descrambler 134 outputs an encrypted 
information unit lue or an information unit lu which is the 
result of decrypting the encrypted information unit lue 
outputted therefrom. The encrypted information unit lue 
is obtained by subjecting the information unit lu to 

25 encryption a plurality of times. Therefore, the encrypted 
information unit lue must be decrypted a plurality of 
times in order to take out the information unit lu. 
[01 29] The information unit descrambler 1 34 receives 
the output of the information unit descrambler 134 itself 

30 again, and repeatedly decrypts the input, thereby mak- 
ing it possible to decrypt the encrypted information unit 
lue obtained by performing encryption a plurality of 
times. Even if the number of times of decryption which 
can be performed at a time by the information unit 

35 descrambler 1 34 is one, therefore, an information unit lu 
can be finally taken out of the encrypted information unit 
lue. The information unit descrambler 134 may be able 
to simultaneously perform a plurality of times of decryp- 
tion. In the case, the information unit lu can be taken out 

40 at higher speed. 

[0130] The reproducer 135 is connected to the infor- 
mation unit descrambler 134 and to the other of input 
ports of the demultiplexer 133 for receiving the informa- 
tion unit lu therefrom. Then, the reproducer 135 con- 

45 verts the inputted information unit lu into reproduction 
information Ir which is reproducible information, and 
outputs the reproduction information Ir therefrom. In 
Example 1 , the reproducer 135 may be a text file viewer, 
image file presenting software, etc. On the other hand, 

so in Example 2, the reproducer 135 may be an MPEG-2 
decoder for reproducing voices or images encoded by 
the MPEG-2, for example. In this case, the output is an 
NTSC (National Television System Standard Commit- 
tee) signal or an analog voice signal. 

55 [0131] The presenter 136 receives the reproduction 
information outputted by the reproducer 135, and 
presents an information unit lu to a user. Specifically, 
the presenter 136 receives the reproduction information 
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lr outputted by the reproducer 135, and presents the 
information contained in the reproduction information lr 
to a user. In Example 1, the presenter 136 may be a 
window system such as X-window or Microsoft Win- 
dows for presenting image and voice to a user. On the 
other hand, in Example 2, the presenter 136 may be a 
television receiver for inputting and receiving an NTSC 
signal and an analog voice signal, for example. 

In Operation 

[01 32] With reference to Figs. 3 and 4, general opera- 
tions performed by the information transmission appara- 
tus 100 will be described bellow. In Fig. 3, the 
operations performed by the transmitting unit 110 and 
the transmitter 120 are shown. 

[0133] At step S301, the information unit generator 
111 generates a plurality of information units !u t and 
outputs the generated information units lu therefrom. 
Examples of the generation of the information units lu 
include a method in which a user enters information 
units lu and designates a file as in Example 1 . The infor- 
mation units lu are selectively outputted from stored 
information units lu in accordance with a predetermined 
schedule as in Example 2. 

[0134] At step S302, information unit scrambler 112 
recursively encrypts the information units lu generated 
at step S301. and produces the results thereof as 
encrypted information units lue. 
[0135] At step S303, the plurality of encrypted infor- 
mation units lue produced by the encryption at step 
S302 are multiplexed, and outputs the result thereof as 
multiple information Im. The ultiplexer 113 multiplexes 
the information units lu generated at step S301 , and 
outputs the result thereof as multiple information Im. 
The multiple information Im is multipartite data conform- 
ing to the MIME in the case of Example 1, while being 
data representing the TS of the MPEQ-2 systems in the 
case of Example 2. 

[0136] At step S304, the lower layer scrambler 114 
encrypts the multiple information Im obtained by the 
multiplexing at step S303, and produces the encrypted 
multiple information Ime. In Example 1, the multiple 
information Im is encrypted using the RSA cipher or the 
like. On the other hand, in Example 2, the payload por- 
tion of the TS of the MPEG-2 is encrypted using a 
MULTI2 cipher manufactured by Hitachi Ltd. for exam- 
ple. 

[0137] At step S305, the sender 115 converts the 
encrypted multiple information Ime obtained by the 
encryption at step S304 into a format which is suitable 
for transmission by the transmitter 120, and produces 
the transmission information it. In Example 1 . informa- 
tion obtained by adding information, for example, "To:" 
field, "From:" to the head of the text of the mail which is 
encrypted multiple information Ime is outputted as the 
transmission information It. On the other hand, in Exam- 
ple 2, the information obtained by encoding the TS of 



the MPEG-2 using an error-correcting code and then, 
modulating the encoded TS is outputted. 
[01 38] At step S306, the transmitter 1 20 transmits the 
transmission information It to a physically distant point. 

5 A plurality of receiving units 1 30 may correspond to one 
transmitting portion. In Example 1 , the mail communica- 
tion daemons mounted on one or a plurality of comput- 
ers connected are communicated to a computer 
network such as the Internet or a LAN (Local Area Net- 

w work) on the basis of the SMTP. Thus, the mail is trans- 
mitted from the mail communication daemon ogn one of 
the computers to the mail communication daemon on 
the other computer. 

[0139] On the other hand, in Example 2, transmission 
75 information It obtained by the conversion in the up-con- 
verter is transmitted to the communication satellite by 
the parabolic antenna. The communication satellite 
transmits the received transmission information It to the 
ground by a transponder. The transmission information 
20 It from the communication satellite is received by the 
ground receiving antenna. 

[0140] In Fig. 4, the operations performed by the 
receiving unit 130 are shown. At step S401 , the receiver 
131 receives the transmission information K outputted 

25 from the transmitter 120, and takes out a part or the 
whole of encrypted multiple information Ime from the 
received transmission information It. In Example 1, 
processing for taking out one electronic mail data 
addressed to a specific user is performed. On the other 

30 hand, in Example 2, processing for filtering a particular 
packet storing information to be found by a PID (Packet 
ID), and selecting and extracting the packet is per- 
formed by tuning to a predetermined frequency. 
[01 41 ] At step S402, the lower layer descrambler 1 32 

35 receives the encrypted multiple information Ime gener- 
ated at step S401 , and decrypts the received encrypted 
multiple information Ime. Then, the lower layer 
descrambler 132 outputs the decryption result as the 
multiple information Im. In Example 1, the lower layer 

40 descrambler 132 is the PGP program started with a 
decryption option. Decryption is performed using the 
RSA cipher by the PGP program, and the result of the 
decryption is outputted. On the other hand, in Example 
2, the multiple information Im encrypted using the 

45 MULTI2 cipher is decrypted, to obtain multiple informa- 
tion Im. 

[01 42] At step S403, the demultiplexer 1 33 separates 
the encrypted information unit lue from the multiple 
information unit Im obtained at step S402. In Example 1 , 

so the demultiplexer 133 separates for each part of the 
multipartite message obtained by multiplexing on the 
basis of the MIME. As a result, the text information, the 
image information, the voice information, and so forth 
which are the respective parts are separated as discrete 

55 information units lu. 

[0143] On the other hand, in Example 2, the demulti- 
plexer 133 separates the plurality of streams multi- 
plexed by the MPEG-2 systems on the basis of a PID 
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(Packet ID, a packet identifier)! As a result, additional 
information such as an MPEG-2 video stream, an 
MPEG-1 audio stream, and EPG are separated as dis- 
crete information units lu. An MPEG-2 video is stand- 
ardized by ITU-T H. 262, and an MPEG-1 audio is 
standardized as ISO/IEC 11172-3 Standard. 
[0144] At step S404, it is judged whether the informa- 
tion after being demultiplexed by the demultiplexer 133 
includes an encrypted information unit lue or not When 
it is judged YES, meaning-ihat that information pro- 
duced by the demultiplexer 133 at step S403 needs 
decryption to take out the content therefrom, the proce- 
dure advances to step S405. 

[0145] At step S405, the information unit descrambler 
134 decrypts once the encrypted information unit lue 
outputted from the demultiplexer 133. Thereafter, the 
procedure returns to step S403. By repeatedly carrying 
out the operation at steps S403, S404, and S405, the 
information unit descrambler 134 can decrypt all the 
encrypted information unit lue included in the multiple 
information Im, and finally take out all the information 
unit lu sent from the transmitting unit 1 10. 
[0146] On the other hand, when it is judged NO at step 
S404, meaning that that information after being demul- 
tiplexed by the demultiplexer 133 does not need decryp- 
tion to' take out the content therefrom. In other words, 
the information outputted from the demultiplexer 133 is 
information unit lu only. Then, the procedure advances 
tostepS406. 

[0147] At step S406, the reproducer 135 receives the 
information unit lu outputted by the descrambler 134, 
and produces reproduction information Ir which is repro- 
ducible information. In Example 1 f when the information 
unit lu is text information, for example, fonts correspond- 
ing to respective character codes are selected and 
listed, to produce a bitmap format as the reproduction 
information Ir. When the information unit lu is in an 
image information format such as JPEG (Joint Photo- 
graphics Experts Group), it is expanded into the bitmap 
format, and the result of the expansion is outputted as 
reproduction information. The JPEG is standardized by 
ISO/IEC 10918. When the information unit lu is voice 
information, it is converted into an analog voice signal 
by the same function as that of a digital-to-analogue 
(D/A) converter. And the analog voice signal is also out- 
putted as reproduction information. 
[0148] On the other hand, in Example 2, when the 
information unit lu obtained at step S301 is the MPEG- 
2 video stream, the MPEG-2 video is decoded, and out- 
puts the NTSC signal as reproduction information. 
When the information unit lu is a voice stream, it is con- 
verted into an analog voice signal by D/A conversion, 
and the analog voice signal is outputted. 
[0149] At step S407, the presenter 136 receives the 
reproduction information Ir outputted from the repro- 
ducer 135, and then presents the contents of reproduc- 
tion information Ir to a user in accordance with the 
format of the reproduction information. In Example 1, 



when the reproduction information obtained at step 
S406 is in the bitmap format, the presenter 136 
arranges and presents the reproduction information Ir 
on a display screen. Thus, the reproduction information 

5 Ir is presented to the user. When the reproduction infor- 
mation obtained at step S406 is an analog voice signal, 
the analog voice signal is converted into sound by being 
sent to a speaker, and is visually presented to the user. 
[01 50] On the other hand, in Example 2, an NTSC sig- 

w nal as the reproduction information which is obtained at 
step S406 is received on a display, the analog voice 
information is sent to a speaker, and the reproduction 
information is presented to the user. 
[0151] As described in the foregoing, in the first 

15 embodiment, it is possible to handle the information unit 
lu which has been recursively encrypted a plurality of 
times. Therefore, it is possible to introduce a hierarchi- 
cal structure into the encryption of the information unit 
lu. The correspondence of the hierarchical structure to 

20 the structure of a program makes it possible to encrypt, 

_ : _ Jn cases such as a case where a part of a set of informa- 
tion units lu is selectively purchased, the information 
unit lu only by performing one type of encryption a 
smaller number of times. - 

25 [0152] The information unit descrambler 134 repeat- 
edly performs decryption in the receiving unit 130. to 
take out the information unit lu. Therefore, the receiving 
unit can be constructed without requiring such a high- 
level or special descrambler as to correspond to a plu- 

30 rality of types of ciphers and perform a plurality of times 
of decryption processing at a time, thereby making it 
possible to realize simplification and cost reduction. 

Encoding information unit? into encrypted multiple infor- 

35 m a tipn unit 

[01 53] With reference to Fig. 2, the encrypted multiple 
information unit Ime produced by the information trans- 
mission apparatus 100 is described. Various processing 

40 levels of information units are expressed with different 
suffixes for the sake of better recognition thereof. For 
example, the output from the lower layer scrambler 114, 
represented by a rectangle of a dot line, is the encrypted 
multiple information ImeOa. 

45 [01 54] The four outputs from the information unit gen- 
erator 111, indicated by circles, are the information units 
Iu1a, Iu2a, Iu3a. and Iu4a, respectively. These informa- 
tion units Iu1a, Iu2a, Iu3a, and Iu4a represent, for exam- 
ple, a tourist resort guide considering the weather 

so forecast, a weather forecast for the tourist resort, a 
weather forecast for allover the country, and a weather 
forecast for a local area, respectively. 
[0155] The rectangles luela. lue 12a, and Iue4a each 
indicated by a solid line represent the units of encrypted 

55 information produced inside the transmitting unit 1 1 0 of 
the information transmission apparatus 100 at respec- 
tive encryption stages. Specifically, the rectangle luela 
represents a first encrypted information unit lue which is 



15 



BNSDOCID: <EP 0903888A2J_> 



29 



EP0903 886A2 



30 



produced, such that the information unit scrambler 1 12 
encrypts the information unit Iu1a outputted from the 
information unit generator 111 with a first predeter- 
mined cipher C1 under a first predetermined encryption 
system CS1 at step S302. Thus, the first encrypted s 
information unit luela is produced. 
[0156] The rectangle Iue12a represents also a second 
encrypted information unit lue which is produced at the 
following two steps. At step S303, the multiplexer 113 
multiplexes the first encrypted information unit luela 10 
received from the information unit scrambler 112 and 
the information unit Iu2a, and produces a multiple infor- 
mation unit Im12a (not shown). At step S302, the infor- 
mation unit scrambler 112 encrypts the multiple 
information unit Im12a received from the multiplexer 15 
113 with a second predetermined cipher C2 under a 
second predetermined encryption system CS2 at step 
S302. Thus, the second encrypted information unit 
Iue12a wherein the information unit Iu1a is encrypted 
twice is produced. 20 
[0157] The rectangle Iue4a represents a third 
encrypted information unit lue which is produced, such 
that the information unit scrambler 112 encrypts the 
information unit Iu4a outputted from the information unit 
generator 111 with a third predetermined cipher C3 25 
under a third encryption system CS3 at step S302. 
Thus, the third encrypted information Iue4a is pro- 
duced. 

[0158] The rectangle ImeOa represents an encrypted 
multiple information Ime which is produced as follows. 30 
First, the multiplexer 113 multiplexes the second 
encrypted information unit Iue12a, the information unit 
3a, and third encrypted information unit Iue4a, and pro- 
duces a multiple information unit Im1234a (not shown) 
at step S303. Second, the lower layer scrambler 114 35 
encrypts the multiple information unit Im1234 with a 
fourth predetermined cipher C4 under a fourth predeter- 
mined encryption system CS4 at step S304. 
[0159] As a result, the first information unit Jul a is 
encrypted thrice with the first, second, and fourth prede- 40 
termined ciphers C1 f C2, and C4. The second informa- 
tion unit Iu2a is encrypted twice with the second and 
fourth predetermined ciphers C2, and C4. The third 
information unit Iu3a is encrypted once with the fourth 
predetermined cipher C4. The fourth information unit 45 
Iu4a is encrypted twice with the third and fourth prede- 
termined ciphers C3 and C4. 

[01 60] Thus, there is a hierarchical order among these 
information unit Iu1a, Iu2a, Iu3a, and Iu4a representing 
different contents of weather forecast program. Specifi- sc 
cally, the encrypted multiple information ImeOa is a set 
of information having meanings for a user. The set is 
one electronic mail or one information program, for 
example. The encrypted multiple information unit ImeOa 
recursively includes a portion (Iu3a) which is not si 
encrypted and a portion (Iue12a and Iue4a) which is 
encrypted therein. 

[0161] Note that each of all ciphers C1 , C2, C3. and 



C4 can be assigned with the same value or any optional 
value according to the suitable resistance of cipher nec- 
essary to protect the information unit against unfair 
access thereto. Similarly, each of ail encryption system 
CS1 , CS2, CS3, and CS4 can be selected from the 
identical encryption system or various different encryp- 
tion system such as examples referred in the above. 
[0162] Considered as an example in which non- 
encrypted portion (Iu3a) and encrypted portion (Iue12a 
and Iue4a) are included in one encrypted multiple infor- 
mation unit (ImeOa). The whole of an encrypted multiple 
information unit ImeOa is a weather forecast program, 
the non-encrypted portion (Iu3a) is a free weather fore- 
cast for allover the country, the encrypted portion 
(Iue12a and Iue4a) is a charged detailed forecast for the 
local areas. Furthermore, a preview of a film and the 
encrypted film, an article for introducing software, an 
execute form of encrypted software, and so forth are 
also considered. 

[0163] In this case, the user can view the weather 
forecast for allover the country (Iu3a) by decrypting the 
encrypted multiple information unit ImeOa, the weather 
forecast for the tourist resort (Iu2a) by decrypting the 
encrypted information unit Iue2a, the tourist resort 
guide considering the weather forecast (Iu1a) by 
decrypting the encrypted information unit luela. and the 
weather forecast for a local area (Iu4a) by decrypting 
the encrypted information unit Iue4a, respectively. 
[0164] Thus, the information unit encrypted plural 
times with discrete ciphers has the same resistance 
against an unfair decryption as in the case that it is 
decrypted with a single cipher having a resistance cor- 
responding to those plural discrete ciphers. Further- 
more, plural information units, such as information units 
luela and Iu2a according to definition 2 are encrypted 
at the same time in the same encryption level, enabling 
to reducing a burden to starting the decrypting opera- 
tion. 

Decoding encrypted mult iple information unit into infor- 
mation unit 

[0165] The encrypted information encrypted with 
ciphers in hierarchically arranged by the transmitting 
unit 1 10 can be decrypted by repeatedly using a single 
of descrambler with a simply constructed apparatus, 
which will be specifically described below. The 
encrypted multiple information unit ImeOa is supplied to 
the receiving unit 130 through the transmitter 120 in the 
format of transmission information It. 
[01 66] The receiver 1 3 1 of the receiving unit 1 30 takes 
out a part or the whole of encrypted multiple information 
ImeOa from the received transmission information It at 
step S401. At step S402. the lower layer descrambler 
132 decrypts the received encrypted multiple informa- 
tion ImeOa with the fourth predetermined cipher C4 to 
obtain the multiple information unit Im1234a (not 
shown) constructed by the second encrypted informa- 
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tion unit tue12a, the third information unit Iu3a, and the 
third encrypted information unit Iue4a. Note that thus 
obtained multiple information unit Im1234a can be pro- 
duced in a format different from that of the multiple infor- 
mation unit Iml 234a produced by the multiplexer 1 13 at 5 
Step S303. 

[0167] The demultiplexer 133 demultiplexes the multi- 
ple information unit Im1234a produced at step S402, 
and separates each of encrypted information unit lue 
and/or information unit lu therefrom at step S403. Thus, 10 
the second encrypted information unit Iue12a, the third 
information unit Iu3a ( and the third encrypted informa- 
tion unit Iue4a are produced at step S403. Note that 
thus obtained information units Iue12a, Iu3a, and tue4a 
can be produced in the formats different from those pro- 15 
duced by the information unit scrambler 112 of the 
transmitting unit 110. Needless to say that those infor- 
mation units luel 2a, Iu3a, and Iue4a can be in the same 
formats as those produced by the information unit 
scrambler 112 of the transmitting unit 110, resulting in 20 
the reproduction of those information units Iue12a, Iu3a, 
and Iue4a. 

[0168] The second encrypted information unit Iue12a 
is sent to the information unit descrambler 134 where 
the multiple information unit Im12a (not shown) is pro- 25 
duced by decrypting the encrypted information unit 
Iue12a with the second predetermined cipher C2 at 
step S405. Thus produced multiple information unit 
Im12a is sent back to the demultiplexer 133 where the 
first encrypted information unit lue 1a and the second 30 
information unit Iu2a are produced by demultiplexing 
the multiple information unit Im12a at step S403. 
[0169] At step S404, the first encrypted information 
unit luela is sent to the information unit descrambler 
1 34, where the first information unit Iu1 a is produced by 35 
decrypting the encrypted information unit luela with the 
first predetermined cipher CI. Similarly, the third 
encrypted information unit Iue4a is sent to the informa- . 
tion unit descrambler 134, where the fourth information 
unit Iu4a is produced. 40 
[01 70] Each of information units lu 1 a produced at step 
S405, Iu2a produced at step S403, Iu3a produced at 
step S403, and Iu4a produced at step S405 are sent to 
the reproducer 135, where the reproduction information 
Ir are produced from those information units Iu1a, Iu2a, 45 
Iu3a, and Iu4a at step S406. Note that all information 
units Iu1a, Iu2a, Iu3a, and Iu4a can be produced in the 
substantially same in content as those produced by the 
information unit generator 111, but can be different in 
the encrypting format or encrypting method. Of course, so 
it is also possible to reproduce the completely same 
information units as those Iu1a. Iu2a, Iu3a, and Iu4a 
produced by the information unit generator 111. 

(Second Embodiment) 55 

[0171] With reference to Figs. 5 to 8, here below, an 
information transmission apparatus according to a sec- 



ond embodiment of the present invention is described. 
The information transmission apparatus 500 includes a 
transmitting unit 510, transmitter 120, and a receiving 
unit 530. The transmitter 120 is the same as that used 
in the information transmission apparatus 100. Here 
below, descriptions of any of substantially the same 
components constructing the information transmission 
apparatus 100 are generally omitted for reducing the 
redundancy. 

[0172] Note that the encrypted multiple information 
Ime produced by a descrambler 532 is substantially the 
same in content as the encrypted multiple information 
Ime produced by the lower layer scrambler 1 14 of the 
transmitting unit 1 1 0, but can be different in the encrypt- 
ing format or encryption method. Of course, it is also 
possible to reproduce the completely same encrypted 
multiple information Ime as that produced by the lower 
layer scrambler 114. 

Transmitting unit 510 

[0173] The transmitting unit 510 has a construction 
very similar to that of the transmitting unit 1 10 shown in 
Fig. 1, such that the information unit scrambler 112 is 
replaced by an information unit scrambler 512. Com- 
pared with the information unit scrambler 112, the infor- 
mation unit scrambler 51 2 should be able to encrypt the 
information unit lu conforming to a lower layer transmis- 
sion performed by a transmitter 120. In other words, the 
information unit scrambler 512 only have to encrypt 
under a certain encryption systerrnjsed by a lower layer 
such as being performed by the transmitter 120. Need- 
less to say, the information unit scrambler 512 may be 
able to encrypt^ under various encryption systems 
including one suitable for the above mentioned lower 
layer transmission. 

[0174] Specifically, as the cipher used in the informa- 
tion unit scrambler 51 2, a cipher which can be decoded 
by sharing a device having high tamper resistance used 
for decryption performed in the scrambler 514 may be 
selected. The device having high tamper resistance is a 
device which is subjected to such measures that stored 
contents are erased if they are unfairly decomposed, 
and information relating to secrecy is not let out from an 
LSI (Large Scale Integrated Circuit) where it is difficult 
to analyze without special facilities. For example, an IC 
card used for a receiver for CS digital broadcasting is a 
device having high tamper resistance. 

Receiving unit 530 

[01 75] The receiving unit 530 has a construction sim- 
ilar to that of the receiving unit 1 30 shown in Fig . 1 , such 
that the lower layer descrambler 132 and the informa- 
tion unit descrambler 134 are replaced by a descram- 
bler 532 and a demultiplexer 533. The descrambler 532 
is connected to the receiver 131 for receiving the 
encrypted multiple information unit Ime therefrom. 
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Then, the descrambler 532 decrypts the received multi- 
ple information unit Ime once, and produces the multiple 
information Im. Note that the descrambler 532 can 
decrypt any encrypted multiple information unit which is 
encrypted under various encryption systems including a s 
certain encryption system adopted by the lower layer 
scrambler 1 14 in the transmitting unit 110. 
[0176] The demultiplexer 533 is connected to the 
descrambler 532 for receiving the multiple information 
Im therefrom, and demultiplexes the received multiple io 
information Im to produce the information unit lu. How- 
ever, when the multiple information Im produced by the 
descrambler 532 includes the repeatedly multiplexed 
information unit therein, the encrypted information unit 
lue remains after demultiplexing. *s 
[0177] The descrambler 532 is further connected to 
the demultiplexer 533 for receiving that remained 
encrypted unit lue therefrom. Then, the descrambler 
532 decrypts the encrypted unit lue, and produces the 
multiple information unit Im, which will be supplied to the 20 
demultiplexer 533. When the encrypted information unit 
lue received from the demultiplexer 533 is simply 
encrypted but not multiplexed, produced therefrom is an 
information unit lu which will be directly supplied to the 
reproducer 135. Thus, the demultiplexer 533 is not 25 
required to be able to demultiplex the repeatedly multi- 
plexed information unit Im. but only have to be able to 
demultiplex an information unit Im which is multiplexed 
once. 

[0178] Thus, the construction in the second embodi- 30 
ment is obtained by removing such a restriction that 
recursive encryption is performed a plurality of times by 
the information unit scrambler 1 12 from the construction 
in the first embodiment. The lower layer descrambler 
132 and the information unit descrambler 134 which 35 
perform decryption in the first embodiment are inte- 
grated into the descrambler 532 this embodiment. The 
integration can be also considered to be the realization 
of the function of the information unit descrambler 134 
by the function of the lower layer descrambler 1 32. 40 

In Operation 

[0179] With reference to Figs. 7 and 8, general opera- 
tions performed by the information transmission appara- 45 
tus 500 will be described bellow. The operations 
performed by the transmitting unit 510 and the transmit- 
ter 120 shown in Fig. 7 are very similar to those that are 
already described with reference to Fig. 3. Therefore, 
the operations are briefly described to clarify the distinc- so 
tion between them. 

[0180] At step S601 , the information unit generator 
111 generates a plurality of information units lu, and 
outputs the generated information units lu therefrom. 
[0181] At step S602, the information unit scrambler ss 
512 encrypts the information units lu generated at step 
S601 once, and outputs the results thereof as 
encrypted information units lue. Specifically, the infor- 



mation unit scrambler 512 encrypts the information unit 
lu conforming to a lower layer transmission performed 
by a transmitter 1 20. Specifically, a cipher used herein is 
of the same type as that of a cipher used in the lower 
layer scrambler 114, The "same' 1 means that when the 
lower layer scrambler 114 uses an RSA cipher, for 
example, the information unit scrambler also performs 
encryption using the RSA cipher. Processing for recur- 
sively encrypting the information unit lu a plurality of 
times is performed at step S302 in the first embodiment, 
while such a restriction that the information unit lu is 
encrypted a plurality of times is not placed at this step. 
[0182] At step S603, the multiplexer 1 13 multiplexes 
the plurality of encrypted information units lue produced 
by the encryption at step S602, and outputs the result 
thereof as multiple information Im therefrom. 
[0183] At step S604, the lower layer scrambler 114 
encrypts the multiple information m obtained by the mul- 
tiplexing at step S603 with the same cipher used at step 
S602. A cipher used in the lower layer scrambler 1 14 is 
the. same as the cipher used in the information unit 
scrambler 112, as in the description of the information 
unit scrambler 512. 

[0184] At step S605, the sender 115 converts the 
encrypted multiple information Ime obtained by the 
encryption at step S604 into a format which is suitable 
for transmission by the transmitter 120, and produces 
the transmission information It. 
[01 85] At step S606, the transmitter 1 20 transmits the 
transmission information ft to a physically distant point 
[0186] In Fig. 8, the operations performed by the 
receiving unit 530 are similar to those that are already 
described with reference to Fig. 4. Therefore, the oper- 
ations are briefly described to clarify the distinction 
between them. At step S701, the receiver 131 receives 
the transmission information It outputted from the trans- 
mitter 120, and takes out a part or the whole of 
encrypted multiple information Ime from the received 
transmission information It. 

[01 87] At step S702, the descrambler 532 receives the 
encrypted multiple information Ime generated at step 
S701, and decrypts the received encrypted multiple 
information Ime. Then, the descrambler 532 outputs the 
decryption result as the multiple information Im. 
[01 88] At step S703, the demultiplexer 533 separates 
the encrypted information unit lue from the multiple 
information unit Im obtained at step S702. The demulti- 
plexer 533 demultiplexes the repeatedly mutiplexed 
information unit Im, but demultiplexes an information 
unit Im which is multiplexed once. 
[0189] At step S704, the descrambler 532 decrypts 
the encrypted multiple information unit Ime from the 
receiver 131 and/or the encrypted information unit lue 
from the demultiplexer 533. From the encrypted infor- 
mation unit Ime or encrypted information unit lue which 
is encrypted once, produced is the information unit lu 
which will be directly supplied to the reproducer 135. 
From the encrypted information unit Ime or encrypted 
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information unit lue which is encrypted and multiplexed, 
produced is the multiple information unit Im which is 
supplied to the demultiplexer 533. 
[0190] Specifically, when the information unit lu is 
encrypted once, the encrypted information unit lue is 
decrypted once, thereby making it possible to generate 
an information unit lu. Although there is such a restric- 
tion that the information unit lu is recursively encrypted 
a plurality of times in the first embodiment, the restric- 
tion is not placed in the second invention. 
[0191] At step S705, the reproducer 135 receives the 
information unit lu outputted from the descrambler 532 
and the demultiplexer 533, and produces reproduction 
information Ir which is reproducible information. 
[0192] At step S706, the presenter 136 receives the 
reproduction information Ir outputted from the repro- 
ducer 135. 

[0193] As described in the foregoing, the encryption 
performed by the information unit scrambler 512 is the 
same as the encryption performed by the lower layer 
scrambler 1 14. Thus, it possible for the single descram- 
bler 532 to decode a cipher used in not only the lower 
layer scrambler 1 14 but also the information unit scram- 
bler 512. That is, it is possible to decrypt the information 
unit lu by preparing only one descrambler which is not 
special. 

Encoding information units into encrypted multiple infor- 
mation unit 

[0194] With reference to Fig. 6 similar to Fig. 2, the 
encrypted multiple information unit Ime produced by the 
information transmission apparatus 500 is described. 
The output from the lower layer scrambler 114, repre- 
sented by a rectangle of a dot line, is the encrypted mul- 
tiple information ImeOb. 

[01 95] The four outputs from the information unit gen- 
erator 111, indicated by circles, are the information units 
lulb, Iu2b, Iu3b, and Iu4b, respectively. These informa- 
tion units lulb, Iu2b, Iu3b and Iu4b represent, for exam- 
ple, a tourist resort guide considering the weather 
forecast, a weather forecast for the tourist resort, a 
weather forecast for allover the country, and a weather 
forecast for a local area, respectively. 
[0196] The rectangles Iue12b, and Iue4b each indi- 
cated by a dot line represent the units of encrypted 
information produced inside the transmitting unit 510 
respective encryption stages. The rectangle Iue12b is 
produced, such that the multiplexer 113 multiplexes the 
information units lulb and Iu2b received from the infor- 
mation unit generator 111, and produces a multiple 
information unit Im12b (not shown) at step S603. Then, 
the information unit scrambler 512 once encrypts the 
multiple information unit Im12b received from the multi- 
plexer 1 13 with a fifth predetermined cipher C5 under a 
fifth predetermined encryption system CSS, and then 
produces the encrypted information unit Iue12b at step 
S602. 



[0197] The rectangle Iue4b represents also an 
. encrypted information unit lue which is produced, such 
that the information unit scrambler 512 encrypts the 
information unit Iu4b with a sixth predetermined cipher 
5 C6 under a sixth predetermined encryption system CS6 
at step S602. 

[0198] The encrypted multiple information unit ImeOb 
is produced, such that the multiplexer 113 multiplexes 
the encrypted information unit lue 12b, the information 

io unit Iu3b, and the encrypted information unit Iue4b, and 
then produces a multiple information unit Iml234b (not 
shown ) at step S603. Then, the lower layer scrambler 
1 14 encrypts the multiple information unit Im1234b with 
a seventh predetermined cipher C7 under a seventh 

15 predetermined encryption system CS7 at step S604. 
[01 99] As a result, the information units lulb and Iu2b 
are both encrypted twice with the fifth, and seventh pre- 
determined ciphers C5 and C7. The information unit 
Iu3a is encrypted once with the seventh predetermined 

20 ciphers C7. The information unit Iu4b is encrypted twice 
with the sixth and seventh predetermined ciphers C6 
andC7. 

[0200] Thus, there is a hierarchical order among these 
information unit lulb, Iu2b, Iu3b. and Iu4b representing 
25 different contents of weather forecast, program. The 
hierarchical order according to this embodiment is dif- 
ferent from that in the first embodiment, specifically 
shown in Fig. 2. 

[0201] Note that each of all ciphers C5, C6, and C7 
30 can be assigned with the same value or any optional 
value according to the suitable resistance of cipher nec- 
essary to protect the information unit against unfair 
access thereto. Similarly, each of ail encryption system 
CS5, CS6, and CS7 can be selected from the identical 
35 encryption system or various different encryption sys- 
tem such as examples referred in the above. Further- 
more, ail ciphers and encryption system can be 
selected from those selected in the first embodiment. 

40 Decoding encrypted multiple information unit into infor- 
mation unit 

[0202] The encrypted information encrypted with 
ciphers in hierarchically arranged by the transmitting 

45 unit 510 can be decrypted by repeatedly using a single 
of descrambler with a simply constructed apparatus, 
which will be specifically described below. The 
encrypted multiple information unit ImeOb is supplied to 
the receiving unit 530 through the transmitter 120 in the 

so format of transmission information It. 

[0203] The receiver 1 31 of the receiving unit 530 takes 
out a part or the whole of encrypted multiple information 
ImeOb from the received transmission information It at 
step S701 . At step S702, the descrambler 532 decrypts 

55 the received encrypted multiple information ImeOb with 
the seventh predetermined cipher C7 to obtain the mul- 
tiple information unit Im 1234b (not shown) constructed 
by the encrypted information unit Iue12b. the informa- 
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tion unit Iu3b, and the encrypted information unit Iue4b. 
Note that thus obtained multiple information unit 
Im1 234b can be produced in a format different from that 
of the multiple information unit Im1234b produced by 
the multiplexer 1 13 at Step S603. 
[0204] The demultiplexer 533 demultiplexes the multi- 
ple information unit Im1234b produced at step S603, 
and separates each of encrypted information unit lue 
and information unit lu therefrom at step S703. Thus, 
the encrypted information unit Iue12b. the information 
unit Iu3b, and the encrypted information unit Iue4b are 
produced at step S703. Note that thus obtained infor- 
mation units Iuel2b, Iu3b, and Iue4b can be produced 
in the formats different from those produced by the infor- 
mation unit scrambler 512 of the transmitting unit 510. 
Needless to say that those information units Jue 12b, 
Iu3b, and Iue4b can be in the same formats as those 
produced by the information unit scrambler 512 of the 
transmitting unit 510, resulting in the reproduction of 
those information units Iue12b, Iu3b, and Iue4b. 
[0205] The encrypted information unit Iue12b is sent 
to the descrambler 532 where the multiple information 
unit Im12b (not shown) is produced by decrypting the 
encrypted information unit Iue12b with the fifth prede- 
termined cipher C5 at step S704. Thus produced multi- 
ple information unit Im12b is sent back to the 
demultiplexer 533 where the information units Iu1b and 
Iu2b are produced by demultiplexing the multiple infor- 
mation unit Im12bat step S703. Similarly, the encrypted 
information unit Iue4b is sent to the descrambler 532, 
where the information unit Iu4b is produced at step 
S704. 

[0206] Each of information units Iu1 b produced at step 
S703, Iu2b produced at step S703, Iu3b produced at 
step S703, and Iu4b produced at step S704 are sent to 
the reproducer 135, where the reproduction information 
Ir are produced from those information units Iu1b. Iu2b, 
Iu3b f and Iu4b at step S705. Note that all information 
units Iu1b, Iu2b, Iu3b, and Iu4b can be produced in the 
substantially same in content as those produced by the 
information unit generator 111, but can be different in 
the encrypting format or encrypting method. Of course, 
it is also possible to reproduce the completely same 
information units as those Iu1b, Iu2b, Iu3b, and Iu4b 
produced by the information unit generator 111. 
[0207] With reference to Fig. 9, an alternative of the 
information transmission apparatus 500 of Fig. 5 is 
shown. The information transmission apparatus 50QR 
shown in Fig. 9 has a construction where the lower layer 
scrambler 114 is removed from the information trans- 
mission apparatus 500. In this apparatus, the encryp- 
tion for a lower layer transmission is performed not by 
the lower layer scrambler 114 (Fig. 5) but by the infor- 
mation unit scrambler 512 (Fig. 9). Therefore informa- 
tion unit scrambler 512 only have to encrypt under a 
certain encryption system used by a lower layer such as 
being performed by the transmitter 120. Needless to 
say, the information unit scrambler 512 may be able to 



encrypt under various encryption systems including one 
suitable for the above mentioned lower layer transmis- 
sion. 

5 (Third Embodiment) 

[0208] With reference to Figs. 10,11, and 1 2, an infor- 
mation transmission apparatus according to a third 
embodiment of the present invention is described. In 
w this embodiment, the information transmission appara- 
tus 800 includes a transmitting unit 81 0, transmitter 1 20, 
and a receiving unit 830. Here below, descriptions of 
any of substantially the same components constructing 
the information transmission apparatuses 100, 500, or 
is 500 R are generally omitted for reducing the redun- 
dancy. 

[0209] Note that, the encrypted multiple information 
Ime produced by the descrambler 832 is substantially 
the same in content as the encrypted multiple informa- 
20 tion Ime produced by the lower layer scrambler 1 14 of 
the transmitting unit 810, but can be different in the 
encrypting format or encryption method. Of course, it is 
also possible to reproduce the completely same 
encrypted multiple information ime as that produced by 
25 the lower layer scrambler 1 14. 

Transmitting unit 810 

[0210] The transmitting unit 810 has a construction 
30 substantially the same as that of the transmitting unit 
510 already described with reference to Fig. 5. How- 
ever, the operation of the transmitting unit 810 for pro- 
ducing the encrypted multiple information Ime is 
different from that of the transmitting unit 510, which will 
35 be described later with reference to Fig. 1 1 and Fig. 12. 

Receiving unit 830 

[021 1 ] The receiving unit 830 has a construction sim- 
40 ilar to that of the receiving unit 530 shown in Fig. 5, such 
that the descrambler 532 and the demultiplexer 533 are 
replaced by a descrambler 832 and a demultiplexer 833. 
The descrambler 832 is connected to the receiver 131 
for receiving the encrypted multiple information unit Ime 
45 therefrom. Then, the descrambler 832 decrypts the 
encrypted multiple information Ime once, and produce 
the multiple information unit Im. Note that the descrarn- 
bler 832 can decrypt hierarchically and repeatedly 
encrypted multiple information unit. The descrambler 
so 832 encrypts an information unit which is encrypted n (n 
is an integer) times and produced n-1 times encrypted 
information unit. Therefore, according to encryption 
times of the encrypted multiple information unit Ime 
inputted from the receiver 131. the descrambler 832 
55 repeatedly decrypts the unit Ime till obtaining no more 
encrypted multiple information unit Ime. 
[0212] The demultiplexer 833 is connected to the 
descrambler 832 for receiving the multiple information 
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lm therefrom, and demultiplexes the received multiple 
information lm to produce the information unit lu. How- 
ever, when the multiple information lm produced by the 
descrambter 832 includes the encrypted information 
unit lue therein, the encrypted information unit lue is 
sent back to the descrambler 832. 

In Operation 

[021 31 With relerence to Fig. 12, general operations 
performed by the receiving unit 830 of information trans- 
mission apparatus 800 will be described bellow. As 
described in the above, the transmitting unit 810 is sub- 
stantially the same as the transmitting unit 510 in con- 
struction, therefore the generation operation is also 
substantially the same as those described with refer- 
ence to Fig. 7. 

[0214] The general operation of the receiving unit 830- 
is as follows. 

[0215] At step S901. the receiver 131 receives the 
transmission information It from the transmitter 120, and 
takes out a part or the whole of encrypted multiple infor- 
mation Ime from the inputted transmission information 
It. 

[021 6] At step S902 , the descrambler 832 receives the 
encrypted multiple information Ime produced at step 
S901. Then, the descrambler 832 decrypts the inputted 
encrypted multiple information Ime, and outputs the 
decryption results as the multiple information lm. 
[021 7] At step S903, the demultiplexer 833 separates 
the multiple information lm produced at step S902 for 
each encrypted information unit lue, and takes out the 
encrypted information unit lue and/or the information 
unit lu. 

[0218] At step S904, it is judged whether an informa- 
tion unit lu outputted from the descrambler 832 or the 
demultiplexer 833 is encrypted or not. When it is judged 
"YES", meaning that the information unit lu is 
encrypted, the information unit lu (lue) from the 
descrambler 832 or demultiplexer 833 is sent back to 
the descrambler 832. Then, the procedure advances to 
step S905. 

[021 9] However, when it is judged "NO", meaning that 
the information unit lu outputted from the descrambler 
832 or the demultiplexer 833 is no more encrypted. The 
information unit lu from the descrambler 832 or demulti- 
plexer 833 is sent to the reproducer 135. Then, the pro- 
cedure advances to step S906. 

[0220] At step S905, the descrambler 832 once 
decrypts the encrypted information unit lue, and outputs 
the decryption result therefrom. Then the procedure 
returns to step S903. By repeatedly carrying out steps 
S903, S904, and S905, the descrambler 832 can 
decrypt the information unit lu to be finally taken out. 
and take out the information unit lu in a format which is 
not encrypted. 

[0221 ] At step S906, the reproducer 1 35 receives the 
information unit lu outputted by the descrambler 832 



and/or the demultiplexer 833, and produces the repro- 
duction information Ir. 

[0222] At step S907, the presenter 136 presents the 
contents of reproduction information Ir obtained at step 
s S906 to a user in accordance with the format of the 
reproduction information. Then, the procedure 
advances to step S903, 

[0223] As described in the foregoing, the recursive 
encryption is performed a plurality of times in the infor- 
10 mation unit scrambler 512. The same cipher system as 
that used in the information unit scrambler 512 is used 
in the lower layer scrambler 114. Thus, it possible for the 
descrambler 832 to perform decryption corresponding 
to all the plurality of times of encryption. 

15 

Encoding informatio n units into encrypted multiple infor- 
mation unit 

[0224] With reference to Fig. 1 1 very similar to Fig. 2, 

20 the encrypted multiple information unit Ime produced by 
the information transmission apparatus 800 is 
described. The output from the lower layer scrambler 
114, represented by a rectangle of a dot line, is the 
encrypted multiple information ImeOc. 

25 [0225] The four outputs from the information unit gen- 
erator 111, indicated by circles, are the information units 
Iu1c. Iu2c, Iu3c. and Iu4c, respectively. These informa- 
tion units Iu1c. iu2c, lu3c and Iu4c represent, for exam- 
ple, a tourist resort guide considering the weather 

30 forecast, a weather forecast for the tourist resort, a 
weather forecast for allover the country, and a weather 
forecast for a local area, respectively. 
[0226] The rectangles luelc, Iue12c, and Iue4c each 
indicated by a dot line represent the units of encrypted 

35 information produced inside the transmitting unit 81 0 of 
the information transmission apparatus 800 at respec- 
tive encryption stages. Specifically, the rectangle luelc 
represents an formation unit lue which is produced, 
such that the information unit scrambler 512 encrypts 

40 the information unit Iu1c outputted from the information 
unit generator 1 1 1 with an eighth predetermined cipher 
C8 under an eighth predetermined encryption system 
CS8. Thus, the encrypted information unit luelc is pro- 
duced. 

45 [0227] The rectangle Iue12c represents also an 
encrypted information unit lue which is produced at the 
following two steps. First, the multiplexer 113 multi- 
plexes the first encrypted information unit luelc 
received from the information unit scrambler 512 and 

so the information unit Iu2c, and produces a multiple infor- 
mation unit Im12c (not shown). Second, the information 
unit scrambler 512 encrypts the multiple information unit 
Im12c received from the multiplexer 113 with a ninth 
predetermined cipher C9 under a ninth predetermined 

55 encryption system CS9. Thus, the encrypted informa- 
tion unit Iue12c wherein the information unit Iu1c is 
encrypted twice is produced. 

[0228] The rectangle Iue4c represents an encrypted 
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information unit tue which is produced, such that the 
information unit scrambler 512 encrypts the information 
unit Iu4c outputted from the information unit generator 
111 with a tenth predetermined cipher C10 under a 
tenth encryption system CS10. Thus, the encrypted 
information Iue4c is produced, 
[0229] The rectangle ImeOc represents an encrypted 
multiple information Ime which is produced as follows. 
First, the multiplexer 113 multiplexes the encrypted 
information unit Iue12c, the information unit Iu3c, and 
the encrypted information unit Iue4c, and produces a 
multiple information unit Im1234c (not shown). Second, 
the lower layer scrambler 114 encrypts the multiple 
information unit Im1234 with a eleventh predetermined 
cipher C11 under a eleventh predetermined encryption 
system CS1 1 . 

[0230] As a result the information unit lu 1c is 
encrypted thrice with the eighth, ninth, and eleventh 
predetermined ciphers C8, C9, and C11. The informa- 
tion unit Iu2c is encrypted twice with the ninth and elev- 
enth predetermined ciphers C9, and C11. The 
information unit Iu3c is encrypted once with the elev- 
enth predetermined cipher C11. The information unit 
lu4c is encrypted twice with the tenth and eleventh pre- 
determined ciphers C10 and C1 1. 
[0231] Note that each of all ciphers C8, C9, C10, and 
C11 can be assigned with the same value or any 
optional value according to the suitable resistance of 
cipher necessary to protect the information unit against 
unfair access thereto. Similarly, each of all encryption 
system CS8, CS9, CS10, and CS11 can be selected 
from the identical encryption system or various different 
encryption system such as examples referred in the 
above. Furthermore, all ciphers and encryption system 
can be selected from those selected in the first and sec- 
ond embodiments. 

Decoding encrypted multiple information unit into infor- 
mation unit 

[0232] The encrypted information encrypted with 
ciphers in hierarchically arranged by the transmitting 
unit 810 can be decrypted by repeatedly using a single 
of descrambler with a simply constructed apparatus, 
which will be specifically described below. The 
encrypted multiple information unit ImeOc is supplied to 
the receiving unit 830 through the transmitter 120 in the 
format of transmission information It. 
[0233] _ The receiver 1 31 of the receiving unit 830 takes 
out a part or the whole of encrypted multiple information 
ImeOc from the received transmission information It at 
step S901 . At step S902, the descrambler 832 decrypts 
the received encrypted multiple information ImeOc with 
the eleventh predetermined cipher C11 to obtain the 
multiple information unit Im1234c (not shown) con- 
structed by the encrypted information unit Iue12c, the 
information unit Iu3c, and the encrypted information unit 
Iue4c. Note that thus obtained multiple information unit 



Im1 234c can be produced in a format different from that 
of the multiple information unit Im1234c produced by 
the multiplexer 113. 

[0234] The demultiplexer 133 demultiplexes the multi- 

5 pie information unit Int1234c produced at step S902, 
and separates each of encrypted information unit lue 
and/or information unit lu therefrom at step S903. Thus, 
the encrypted information unit Iue12c, the information 
unit Iu3c, and the encrypted information unit Iue4c are 

10 produced at step S903. Note that thus obtained infor- 
mation units tue12c, Iu3c, and Iue4c can be produced in 
the formats different from those produced by the infor- 
mation unit scrambler 512 of the transmitting unit 810. 
Needless to say that those information units Iue12c, 

is Iu3c t and Iue4c can be in the same formats as those 
produced by the information unit scrambler 512 of the 
transmitting unit 810, resulting in the reproduction of 
those information units Iue12c, Iu3c, and Iue4c. 
[0235] Trough the operations performed at steps S904 

20 and S905, the reproduction information Ir are produced 
from those information units Iu1c, lu2c, Iu3c, and Iu4a at 
step S906. Note that all information units Iu1c, Iu2c, 
Iu3c, and iu4a can be produced in the substantially 
same in content as those produced by the information 

25 unit generator 1 1 1 , but can be different in the encrypting 
format or encrypting method. Of course, it is also possi- 
ble to reproduce the completely same information units 
as those Iu1c. Iu2c, Iu3c, and Iu4c produced by the 
information unit generator 111. 

30 [0236] With reference to Fig. 13, an alternative of the 
information transmission apparatus 800 of Fig. 10 is 
shown. The information transmission apparatus 800R 
shown in Fig. 13 has a construction where the lower 
layer scrambler 114 is removed from the information 

35 transmission apparatus 800. In this apparatus, the 
encryption for a lower layer transmission is performed 
not by the lower layer scrambler 1 1 4 (Fig. 1 0) but by the 
information unit scrambler 512 (Fig. 14). Therefore 
information unit scrambler 512 only have to encrypt 

40 under a certain encryption system used by a lower layer 
such as being performed by the transmitter 120. Need- 
less to say, the information unit scrambler 512 may be 
able to encrypt under various encryption systems 
including one suitable for the above mentioned lower 

45 layer transmission. 

(Fourth Embodiment) 

[0237] With reference to Figs. 14, 15, 16, and 17, an 
so information transmission apparatus according to the 
fourth embodiment of the present invention is described 
here below. The information transmission apparatus 
1000 includes a transmitting unit 1010, the transmitter 
120. and a receiving unit 1030. Here below, descriptions 
55 of any of substantially the same components construct- 
ing the information transmission apparatuses 100, 500, 
500R, 800, or 800R are generally omitted for reducing 
the redundancy. 
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Transmitting unit 1010 

[0238] The transmitting unit 1010 has a construction 
very similar to that of the transmitting unit 1 10 of the first 
embodiment, such that the information unit scrambler 
112 is replaced by an information unit scrambler 1012. 
The information unit scrambler 1012 recursively 
encrypts the information units lu outputted by the infor- 
mation unit generator 111a plurality of times, and pro- 
duces the encrypted information units lue. A method of 
performing recursive encryption a plurality of times may 
be the same as that performed by the information unit 
scrambler 1 12 in the first embodiment. 
[0239] The information unit scrambler 1012 adds an 
encrypted information unit Identifier which is an identi- 
fier for distinguishing an information unit lu from the out- 
putted encrypted information units lue. Hereinafter the 
encrypted information unit Identifier is hereinafter 
referred to as an encrypted information unit ID tor sim- 
plification. Although the encrypted information unit lue 
is composed of so-called child encrypted information 
units lue, the encrypted information unit ID shall be 
added not to the child encrypted information units lue 
but to parent encrypted information units lue. The same 
value is assigned to information units lu updated with 
time as the encrypted information unit ID. For example, 
the same encrypted information unit ID is assigned to 
an information unit lu of the weather in allover the coun- 
try for yesterday and an information unit lu of the 
weather in allover the country for today. 

Receiving Unit 1030 

[0240] The receiving unit 1030 includes receiver 131, 
a lower layer descrambler 132, demultiplexer 1033, stor- 
age 1034, an information unit descrambler 1035, repro- 
ducer 1036, and presenter 136. Specifically the 
receiving unit 1030 has a construction similar to that of 
the receiving unit 130 of the first embodiment shown in 
Fig. 1, such that the demultiplexer 133 and reproducer 
135 are replaced by the demultiplexer 1033 and the 
reproducer 1036, respectively, in this embodiment. 
[0241] Furthermore, the storage 1034 is additionally 
inserted between the demultiplexer 1033 and the repro- 
ducer 1036. The storage 1034 is connected to the 
demultiplexer 1033 and the reproducer 1036 for receiv- 
ing the encrypted information unit lue and an reproduc- 
tion designating information Idr therefrom, respectively. 
The storage 1034 is further connected to the informa- 
tion unit descrambler 1035 for exchanging the 
encrypted information unit lue therebetween. 
[0242] The storage 1034 stores the encrypted infor- 
mation unit lue inputted from the demultiplexer 1033 
and the information unit descrambler 1035 therein. 
Then, the storage 1034 replaces the encrypted informa- 
tion lue therein with newly inputted encrypted informa- 
tion lue which is being updated. Thus, the encrypted 
information unit lue stored in the storage is updated to 



the newest one. When the stored encrypted information 
unit lue is designated by the inputted reproduction des- 
ignating information Idr, the storage 1034 outputs the 
encrypted information unit lue. 

5 [0243] The information unit descrambler 1035 is fur- 
ther connected to the input port thereof for supplying an 
encrypted information unit lue (an information unit lu 
which is not encrypted is also an encrypted information 
unit lue, as defined previously). The information unit 

w descrambler 1035 is also connected to the input port of 
the demultiplexer 1033 for supplying an encrypted infor- 
mation unit lue. 

[0244] The reproducer 1036 is further connected to 
" the demultiplexer 1033 for receiving the information unit 
is lu therefrom, and produces the reproduction information 
Ir and the reproduction designating information Idr. The 
reproduction designating information Idr is an informa- 
tion for designating an information unit lu. Specifically, 
the reproduction designating information Idr designates 
20 the information unit lu included in the encrypted infor- 
mation unit lue stored in the storage 1034. The informa- 
tion unit lu designated by the reproduction designating 
information Idr may be determined by a users direct 
entry, or may be determined independently by the infor- 
ms mation transmission apparatus 1000 itself. 

[0245] The presenter 136 is connected to the repro- 
ducer 1036 for receiving the reproduction information Ir 
therefrom. Then, the presenter 136 presents contents 
included in the reproduction information Ir to a user. 

30 

In Operation 

[0246] With reference to Figs. 15, 16. and 17. the 
operations performed by the information transmission 
35 apparatus 1 000 is described below. 

[0247] In Fig. 15, a flow chart showing the operations 
performed by the transmitting unit 1010 and the trans- 
mitter 120 is shown. 

[0248] At step S1 101 , the information unit generator 
40 m produces a plurality of information units lu. 

[0249] At step S1 102, the information unit scrambler 
1012 recursively encrypts the information units lu gen- 
erated at step S1 101, and takes the results thereof as 

encrypted information units lue. 

45 [0250] At step S1103, an encrypted information unit 
ID is added to the encrypted information units lue gen- 
erated at step S1102. The encrypted information unit ID 
can be easily taken out without decrypting the 
encrypted information unit lue because it is added to the 
so result of encrypting the information unit lu at step 
S1102. 

[0251 ] At step S1 1 04, the multiplexer 1 1 3 multiplexes 
the encrypted information units lue generated by the 
encryption at step S1 103. and outputs the result thereof 
55 as multiple information Im. 

[0252] At step S1 105. the lower layer scrambler 114 
encrypts the multiple information Im obtained by the 
multiplying at step S1 104, and produces the encrypted 
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multiple information Ime. The encryption performed at 
step S1 105 shall use the same cipher as that used in 
the encryption performed at step S1 102. 
[0253] At step S1106, the sender 115 converts the 
encrypted multiple information Ime obtained by the s 
encryption at step S11 05 into a format which is suitable 
for transmission by the transmitter 120, and produces 
the transmission information It. 
[0254] At step S1107, the transmitter 120 transmits 
the transmission information It to a physically distant 
point. In this case, a plurality of receiving units 1030 
may correspond to one transmitting unit 1010. 
[0255] In Fig. 16, a flow chart showing the operation 
performed by the receiving unit 1030 is shown. 
[0256] At step S1201, the receiver 131 receives the 
transmission information It from the transmitter 120, and 
takes out a part or the whole of encrypted multiple infor- 
mation Ime from the inputted transmission information. 
It. 

[0257] At step S1 202, the lower layer descrambler 1 32 
receives the encrypted multiple information Ime 
obtained at step S1201, and decrypts the inputted 
encrypted multiple information Ime. 
[0258] At step S1203, the demultiplexer 1033 sepa- 
rates the multiple information im obtained at step S1202 
for each encrypted information unit lue. and takes out 
the encrypted information unit lue. 
[0259] At step S1204. the storage 1034 stores the 
encrypted information unit lue using the encrypted infor- 
mation unit ID. 

[0260] In Fig. 17, the details of the operations per- 
formed by the storage 1034 at step S1204 will be 
described below. 

[0261] At step S1301, an encrypted information unit 
lue is inputted from the demultiplexer 1033. 
[0262] At step S1302, a value i of an encrypted infor- 
mation unit ID added to the encrypted information unit 
lue inputted at step S1301 is obtained. 
[0263] At step S1303, it is examined by retrieval 
whether or not the encrypted information unit lue, to 
which the encrypted information unit ID having the value 
i is added, has been already stored in the storage 1034. 
[0264] At step S1304, It is judged whether any 
encrypted -information unit lue is stored in the storage 
1034 or not. When it is judged "YES", the procedure 
advances to step S1305. However, when it s judged 
"NO", the procedure advances to step S1306. 
[0265] At step S1305, the encrypted information unit 
lue inputted at step S1301 is added and stored. There- 
after, the procedure returns to step S1301. From step 
S1301. the processing is repeated. 
[0266] At step S1306, the encrypted information unit 
lue, to which the encrypted information unit ID having 
the value i is added, currently stored is removed, and 
the encrypted information unit lue inputted at step 
S1301 is stored instead. Thereafter, the procedure 
returns to step S1301 . From step S1 301 , the processing 
is repeated. 



[0267] As described in the foregoing, the information 
unit lu stored in the storage 1034 is encrypted as an 
encrypted information unit lue. Even rf the contents of 
the storage 1034 is unfairly referred to, therefore, the 
secrecy is ensured. In the case of updating, the 
encrypted information unit ID is assigned to the parent 
encrypted information units lue, thereby making it easy 
to take out the encrypted information unit ID from the 
encrypted information unit lue outputted by the demulti- 
plexer 1033. The encrypted information unit ID which 
can be easily taken out is only used, so that it is very 
simply feasible to perform updating processing of the 
contents of the storage 1034. 

[0268] By adding an information indicating whether or 
not updating is performed to the encrypted information 
unit ID, it is possible to simplify processing of the 
encrypted information unit lue sent many times without 
being changed by the storage 1034. As examples of the 
information indicating whether or not updating is per- 
formed are; 

(1) a flag indicating that updating is performed, 

(2) a numerical value representing a version, and 

(3) a checksum of the whole of information are con- 
sidered. 

[0269] At step S1 205, the procedure advances to step 
S1206 when the reproducer 1036 outputs reproduction 
designating information Idr, while being returned to step 
S1201 when it does not output the reproduction desig- 
nating information Idr. 

[0270] At step S 1 206 , the storage 1 034 takes out the 
encrypted information unit lue having the encrypted 
information unit ID designated by the reproduction des- 
ignating information Idr outputted at step S1205 from 
the storage 1034. Then, the storage 1034 outputs the 
encrypted information unit lue. 
[0271] At step S1207, when an information unit lu to 
be taken out exists in a state where it is not encrypted in 
the encrypted information unit lue inputted to the infor- 
mation unit descrambler 1035, the procedure advances 
to step S1209. 

[0272] At step S1208, the information unit descram- 
bler 1035 decrypts once the encrypted information unit 
lue in which there exists the information unit lu to be 
taken out. Thereafter, the procedure returns to step 
S1207. At step S1209, the reproducer 1036 receives 
the information unit lu outputted by the information unit 
descrambler 1035. Then, the reproducer 1036 gener- 
ates the reproduction information It 
[0273] At step S1 2 1 0, the presenter 1 36 presents the 
reproduction information obtained at step S1209 to a 
user in accordance with the format of the reproduction 
information. 

[0274] As described in the foregoing, the encrypted 
information unit ID is added to the encrypted informa- 
tion unit lue. Additionally provided is the storage 1034. 
Thus, the encrypted information unit lue stored in the 
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storage 1034 can be updated to the newest one without 
performing decryption processing in the information unit 
descrambler 1035. When the user actually views the 
encrypted information unit lue. the encrypted informa- 
tion unit lue is decrypted by the information unit 
descrambler 1035. 

[0275] It is to be noted that the information unit 
descrambler 134 used in the foregoing embodiments 
should be able to decrypts the multiple encrypted infor- 
mation unit lu (Ime) at the same time. Contrary the 
information unit descrambler 1035 is free from such a 
restriction peculiar to the information unit descrambler 
134, owing to that the encrypted information which is a 
result of one time decryption. Specifically, by receiving 
the information little by little from the storage 1034, it is 
possible to decrypts the encrypted information at slower 
processing speed compared with the speed at which 
the transmitter 120 transmits. 

[0276] Furthermore, it is also possible to temporarily 
outputs the encrypted information unit lue into the stor- 
age 1034, only when the processing can not be com- 
pleted within a determined period. This temporarily 
stored encrypted information is outputted to the infor- 
mation unit descrambler 1035, and then is processed 
thereat. 

[0277] As described in the above, a result of that the 
encrypted information unit lue is little by little supplied 
irom the storage 1034 to the information unit descram- 
bler 1035, and then thus supplied encrypted information 
unit lue is little by little outputted from the information 
unit descrambler 1035. Resultantly, the demultiplexer 
1033 may demultiplex to dissolve the multiplexed infor- 
mation into each information unit at a slower speed 
compared with a transmission speed by the transmitter 
120. 

[0278] The reproducer 1036 designates the contents 
of information to be supplied to the storage 1034 in 
accordance with the user's request. For this purpose, 
the reproducer 1036 produces the reproduction desig- 
nating information Idr. Owing to this reproduction desig- 
nating information Idr, it is possible to perform 
decryption at any optional tjming. Thus, even if the 
encryption key is supplied later than the encrypted infor- 
mation (It), the receiving unit 1030 can process that 
encrypted information. 

(Fifth Embodiment) 

[0279] With reference to Figs. 18, 19, and 20, an infor- 
mation transmission apparatus according to the fifth 
embodiment of the present invention is described. The 
information transmission apparatus 1400 includes a 
transmitting unit 1410, the transmitter 120, and a receiv- 
ing unit 1430. Here below, descriptions of any of sub- 
stantially the same components constructing the 
information transmission apparatuses 100, 500, 500R, 
800, 800R, or 1000 are generally omitted for reducing 
the redundancy. 



[0280] The information transmission apparatus 1400 
is constructed by removing such a restriction that the 
information unit scrambler 1012 recursively encrypts a 
plurality of times from the information transmission , 
5 apparatus 1000 according to the fourth embodiment. 
Furthermore, the lower layer descrambler 132 and the 
information unit descrambler 1035 in the fourth embod- 
iment are integrated into the descrambler 1432 in the 
fifth embodiment. It can be considered that the integra- 
te tion enables the descrambler 1432 to substitute for the 
function of the information unit descrambler 1035. 

Transmitting unit 1410 

75 [0281] The transmitting unit 1410 has a construction 
substantially the same as that of the transmitting unit 
1010 shown in Fig. 14. Therefore, description is omit- 
ted. 

20 Receiving unit 1 430 

[0282] The receiving unit 1 430 has a construction very 
similar to that of the receiving unit 1030, such that the 
lower layer descrambler 132 and the information unit 

25 descrambler 1035 are replaced by a descrambler 1432. 
[0283] The descrambler 1432 is connected to the 
receiver 131 and the storage 1034 for receiving the mul- 
tiple information units lue therefrom. Then, the 
descrambler 1432 outputs multiple information Im, 

30 when the encrypted multiple information Ime is inputted 
thereto. Further, the descrambler 1432 decrypts, when 
the encrypted information unit lue is inputted thereto, 
the inputted encrypted information unit lue, and outputs 
an information unit lu which is the decryption result 

35 thereof. Thus obtained information unit lu is directly 
supplied to the reproducer 1036. 
[0284] The demultiplexer 1 433 is connected to the 
descrambler 1432 for receiving the multiple information 
unit Im therefrom to demultiplex the received multiple 

40 information unit Im. Then, the demultiplexer 1433 pro- 
duces the encrypted information unit lue and send it to 
the storage 1034, when the multiple information unit Im 
from the descrambler 1432 is encrypted. The demulti- 
plexer 1433 produces the information unit lu and send it 

45 to the reproducer 1036, when the multiple information 
unit Im from the descrambler 1432 is not encrypted. 
[0285] The storage 1034 is connected to the demulti- 
plexer 1433 and the reproducer 1036 for receiving the 
encrypted information unit lue and reproduction desig- 

50 nating information Idr therefrom, respectively. The stor- 
age 1034 is further connected to the input port of the 
descrambler 1432. The storage 1034 stores the 
received encrypted information unit lue therein, and 
replaces the stored encrypted information unit lue when 

55 the encrypted information unit lue is updated. Thus, the 
encrypted information unit lue stored in the storage 
1034 is kept the newest. 

[0286] When the stored encrypted information unit lue 
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is designated by the received reproduction designating 
information Idr, the storage 1034 outputs the encrypted 
information unit lue. This encrypted information unit lue 
is directly fed back to the descrambler 1432. 
[0287] The reproducer 1036 is connected to the 
demultiplexer 1433 for receiving the information unit lu 
therefrom, and to the storage 1034 for supplying the 
reproduction designating information Idr thereto. 
[0288] Note that descrambler 1432 can perform the 
decryption process at slower speed not conforming to 
the information transmission speed at the transmitter 
120, owing to that the encrypted information lue is sup- 
plied to the descrambler 1432 from the storage 1034 lit- 
tle by little. This is especially effective for the first and 
more inner, viewed from the outer shell, encrypted and 
more inner encrypted information units. 
[0289] As described in the above, a result of that the 
encrypted information unit lue is little by little supplied 
from the storage 1034 to the descrambler 1432. Result- 
antly, the demultiplexer 1433 may demultiplex to dis- 
solve the first and more inner, viewed from the outer 
shell, multiplexed information units and at a slower 
speed compared with a transmission speed by the 
transmitter 120. 

In Operation 

[0290] With reference to Figs. 19 and 20, the opera- 
tions of the information transmission apparatus 1400 is 
described briefly. In Fig. 19, a flow chart for operations 
performed by the transmitting unit 1410 and the trans- 
mitting unit 120 is shown. 

[0291] At step S1501, the information unit generator 
1 1 1 produces a plurality of information units lu, and out- 
puts the generated information units lu. 
[0292] At step S1502, the information unit scrambler 
1012 respectively encrypts the information units lu gen- 
erated at step S1501 , and takes the results thereof as 
encrypted information units lue. 
[0293] At step S1503. an encrypted information unit 
ID is added to the encrypted information units lue gen- 
erated at step S1502. 

[0294] At step S1504, the multiplexer 1 13 multiplexes 
the encrypted information units lue generated by the 
encryption at step S1502, and outputs the result thereof 
as multiple information Im. 

[0295] At step S1505, the lower layer scrambler 114 
encrypts the multiple information Im obtained by the 
multiplexing at step S1 504, and produces the encrypted 
multiple information Ime. The encryption performed by 
the lower layer scrambler 1 1 4 shall use the same cipher 
as that in the encryption performed by the information 
unit scrambler 1012. 

[0296] At step S1506, the sender 115 converts the 
encrypted multiple information Ime obtained by the 
encryption at step S1505 into a format which is suitable 
for transmission by the transmitter 120, and produces 
the transmission information It. At step S1507, the 



transmitter 120 transmits the transmission information It 
to a physically distant point. In this case, a plurality of 
receiving units 1430 may correspond to one transmit- 
ting unit 1410. 

5 [0297] In Fig. 20, a flow chart for operations performed 
by the receiving unit 1430 is shown. 
[0298] At step 1601, the receiver 131 receives the 
transmission information It inputted from the transmitter 
1 20, and takes out a part or the whole of encrypted mul- 

10 tiple information Ime from the inputted transmission 
information It. 

[0299] At step Si 602, the descrambler 1 432 receives 
the encrypted multiple information Ime obtained at step 
S1601. Then, the descrambler 1432 decrypts the 

is received encrypted multiple information Ime, and pro- 
duces the multiple information Im. 
[0300] At step S1603, the multiplexer 1433 separates 
the multiple information Im obtained at step S1602 for 
each encrypted information unit lue, and takes out the 

20 encrypted information unit lue. 

[0301] At step S1604, the storage 1034 stores the 
encrypted information unit lue using the encrypted infor- 
mation unit ID. 

[0302] At step S1 605, the procedure advances to step 
25 S1606 when the reproducer 1036 outputs reproduction 
designating information Idr, while being returned to step 
S1 601, when it does not output the reproduction desig- 
nating information Idr. 

[0303] At step S1606, the storage 1034 takes out the 
30 encrypted information unit lue having the encrypted 
information unit ID designated by the reproduction des- 
ignating information Idr outputted at step S1605 from 
the storage 1034. Then, the storage 1034 outputs the 
encrypted information unit lue. 
35 [0304] At step S1 607, the descrambler 1 432 decrypts 
the encrypted information unit lue, to generate an infor- 
mation unit lu. When the information unit lu is encrypted 
once, the encrypted information unit lue is decrypted 
once, thereby making it possible to generate an infor- 
40 mation unit lu. Although, there is such a restriction that 
the information unit lu is recursively encrypted a plural- 
ity of times in the fourth invention, the restriction is not 
placed in this invention. 

[0305] At step S1608, the reproducer 1435 receives 
45 the information unit lu outputted by the descrambler 
1432, and produces the reproduction information Ir. 
[0306] At step S 1 609, the presenter 1 436 presents the 
reproduction information obtained at step S1608 to a 
user in accordance with the format of the reproduction 
so information. 

[0307] As described in the foregoing, the encryption 
performed by the information unit scrambler 1012 is 
made the same as the encryption performed by the 
lower layer scrambler 114. Thus, it possible for the sin- 
55 gle descrambler 1432 to decode a cipher used in not 
only the lower layer scrambler 1 14 but also the informa- 
tion unit scrambler 1012. That is, it is possible to decrypt 
the information unit lu by preparing only one descram- 
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bier which is not special. 

[0308] Further, the encrypted information unit ID is 
added to the encrypted information unit lue, and the 
storage 1034 is added, thereby making it possible to 
update the encrypted information unit lue stored in the 
storage 1034 to the newest one without performing 
decryption processing in the descrambler 1432. When 
the user actually views the encrypted information unit 
lue, the encrypted information unit lue is decrypted by 
the descrambler 1432. 

[0309] With reference to Fig. 21 , an alternative of the 
information transmission apparatus 1400 of Fig. 18 is 
shown. The information transmission apparatus 1400R 
shown in Fig. 21 has a construction where the lower 
layer scrambler 114 is removed from the information 
transmission apparatus 1400. In this apparatus, the 
encryption for a lower layer transmission is performed 
not by the lower layer scrambler 1 14 (Fig. 1 8) but by the 
information unit scrambler 1012 (Fig. 21). Therefore 
information unit scrambler 1012 only have to encrypt 
under a certain encryption system used by a lower layer 
such as being performed by the transmitter 120. Need- 
less to say, the information unit scrambler 1012 may be 
able to encrypt under various encryption systems 
including one suitable for the above mentioned lower 
layer transmission. 

(Sixth Embodiment) 

[031 0] With reference to Figs. 22, 23, and 25, an infor- 
mation transmission apparatus according to the sixth 
embodiment of the present invention is described. The 
information transmission apparatus 1700 includes a 
transmitting unit 1710, the transmitter 120, and a receiv- 
ing unit 1 730. Here below, descriptions of any of sub- 
stantially the same components constructing the 
information transmission apparatuses 100, 500, 500R, 
800, 800R, 1000, 1400, and 1400R are generally omit- 
ted for reducing the redundancy. 
[031 1 ] In this embodiment, it is invented that the infor- 
mation unit lu which is outputted from the descrambler 
1732 is supplied back thereto, so that the descrambler 
1732 can handle such information unit as been recur- 
sively encrypted a plurality of times. 

Transmitting unit 171Q 

[0312] The transmitting unit 1710 has a construction 
substantially the same as that of the transmitting unit 
1010 shown in Fig. 14. Therefore, description is omit- 
ted. 

Receiving unit 1730 

[031 3] The receiving unit 1 730 has a construction very 
similar to that of the receiving unit 1430 according to the 
fifth embodiment (Fig. 18). such that the descrambler 
1432 is replaced by a descrambler 1732. 



[0314] The descrambler 1732 is connected to the 
receiver 131 for receiving the encrypted multiple infor- 
mation Ime therefrom, and produces the encrypted 
information unit lue, the multiple information im, or the 

s information unit lu. The descrambler 1732 has a loop 
line for returning thus produced encrypted information 
unit lue thereto. The descrambler 1732 is also con- 
nected to the reproducer 1036 for supplying thus pro- 
duced information unit lu thereto, and to the 

io demultiplexer 1 433 for supplying thus produced multiple 
information lu thereto. Further, the descrambler 1732 is 
bilaterally connected to the storage 1 034 for exchanging 
the encrypted information unit lue therebetween. 
The descrambler 1732 outputs, when the encrypted 

r5 multiple information Ime is inputted thereto, multiple 
information Im, while decrypting, when the encrypted 
information unit lue is inputted thereto, the encrypted 
information unit lue, and outputs an information unit lu 
which is the result thereof. 

20 [0315] The demultiplexer 1433 is connected to the 
_ _descrambler 1732 for receiving the multiple information 
Im therefrom, and outputs an encrypted information unit 
lue and/or the information unit lu. 
[0316] The storage 1 034 receives the encrypted infor- 

25 mation unit lue outputted by the demultiplexer 1433 and 
demultiplexer 1732, and the reproduction designating 
information Idr outputted by the reproducer 1036. Then, 
the storage 1 034 also outputs the encrypted information 
unit lue to the descrambler 1 732. 

30 [0317] The storage 1034 stores the received 
encrypted information unit lue, and replaces, when the 
encrypted information unit lue is updated, the stored 
encrypted information unit lue, to update the encrypted 
information unit lue to the newest one. 

35 [031 8] When the stored encrypted information unit lue 
is designated by the received reproduction designating 
information Idr, the storage 1034 outputs the encrypted 
information unit lue. 

[0319] The reproducer 1036 receives the information 
40 unit lu outputted by the descrambler 1732, and outputs 
the reproduction information Ir and the reproduction 
designating information Idr. It is to be noted that the 
descrambler 832 used in the third embodiment should 
be able to decrypts the multiple encrypted information 
45 unit lu at the same time. Contrary, the descrambler 1 732 
is free from such a restriction that the descrambler 832, 
owing to that the encrypted information which is a result 
of one time decryption is temporarily stored in the stor- 
age 1034. 

so [0320] Furthermore, it is also possible to temporarily 
outputs the encrypted information unit lue into the stor- 
age 1034, only when the processing can not be com- 
pleted within a determined period. This temporarily 
stored encrypted information is outputted to the infor- 

55 mation unit descrambler 1732, and then is processed 
thereat. 



27 



BNSDOCID: <EP 0903886A2_I_> 



53 



EP 0 903 886 A2 



54 



In Operation 

[0321] With reference to Fig. 23, the operations per- 
formed by the receiving unit 1730 will be described in 
detail. 

[0322] At step S 1801, the receiver 131 receives the 
transmission information It from the transmitter 120, and 
takes out a part or the whole of the encrypted multiple 
information Ime from the received transmission informa- 
tion It 

[0323] At step S1 802, the descrambler 1 732 receives 
the encrypted multiple information Ime obtained at step 
S1801. Then, the descrambler 1732 decrypts the 
received encrypted multiple information Ime, and pro- 
duces the multiple information Im. 
[0324] At step S1803, the demultiplexer 1433 sepa- 
rates the multiple information Imobtained at step S1802 
for each encrypted information unit lue, and takes out 
the encrypted information unlflue. 
[0325] At step S1804, the storage 1034 stores the 
encrypted information unit lue using the encrypted infor- 
mation unit ID. 

[0326] At step S1 805, the procedure advances to step 
S1806 when the reproducer 1036 outputs reproduction 
designating information Idr, while being returned to step 
S1801 when it does not output the reproduction desig- 
nating information idr. 

[0327] At step S1 806, the storage 1 034 takes out the 
encrypted information unit lue having the encrypted 
information unit ID designated by the reproduction des- 
ignating information Idr outputted at step S1805 from 
the storage 1034 storing the encrypted information unit 
lue, and outputs the encrypted information unit lue 
taken out. 

[0328] At step S1807, when an information unit lu to 
be taken out exists in a state where it is not encrypted in 
the encrypted information unit lue inputted to the 
descrambler 1732, the procedure advances to step 
SI 809. 

[0329] At step SI 808, the descrambler 1 732 decrypts 
once the encrypted information unit lue in which there 
exists the information unit lu to be taken out. Thereafter, 
the procedure returns to step S1807. 
[0330] At step S1809, the reproducer 1036 receives 
the information unit lu outputted by the descrambler 
1732, and produces the reproduction information Ir 
which is reproducible information. 
[0331] At step S1810, the reproducer 136 presents 
the reproduction information Ir obtained at step S1809 
to a user in accordance with the format of the reproduc- 
tion information. 

[0332] As described in the foregoing, the recursive 
encryption is performed a plurality of times by the infor- 
mation unit scrambler 1012. and the same cipher sys- 
tem as that used in the information unit scrambler 1012 
is used in the lower layer scrambler 1 1 4, thereby making 
it possible to perform decryption corresponding to all the 
plurality of times of encryption in the descrambler 1 732. 



[0333] Further, the encrypted information unit ID is 
added to the encrypted information unit lue, and the 
storage 1034 is added, thereby making it possible to 
update the encrypted information unit lue stored in the 

5 storage 1034 to the newest one without performing 
decryption processing in the descrambler 1732. When 
the user actually views the encrypted information unit 
lue, the encrypted information unit lue is decrypted by 
the descrambler 1 732. 

10 [0334] With reference to Fig. 24, an alternative of the 
information transmission apparatus 1700 of Fig. 22 is 
shown. The information transmission apparatus 1700R 
shown in Fig. 24 has a construction where the lower 
layer scrambler 114 is removed from the information 

is transmission apparatus 1700. In this apparatus, the 
encryption for a lower layer transmission is performed 
not by the lower layer scrambler 1 1 4 (Fig. 22) but by the 
information unit scrambler 1012 (Fig. 24). Therefore 
information unit scrambler 1012 only have to encrypt 

20 under a certain encryption system used by a lower layer 
such as being performed by the transmitter 120. Need- 
less to say, the information unit scrambler 1012 may be 
able to encrypt under various encryption systems 
including one suitable for the above mentioned lower 

25 layer transmission. 

[0335] As described in detail in the foregoing, accord- 
ing to the present invention, information units lu are sub- 
jected to the same recursive encryption a plurality of 
times, and are decrypted a plurality of times by one 

30 descrambler. Therefore, it is possible to not only per- 
form encryption having a larger degree of freedom, as 
compared with that in the conventional example, but 
also to simplify the information transmission apparatus 
by preventing a special descrambler and the addition of 

35 a descrambler, for example. 

[0336] Furthermore, an encrypted information unit ID 
added after the encryption of the information unit lu is 
introduced, to update the contents of storage newly pro- 
vided on the basis of the ID. In actually viewing the infor- 

40 mation unit lu, the information unit lu is decrypted by the 
descrambler. Therefore, it is not only feasible to simply 
manage the updating of the contents of the storage but 
also possible to prevent, because the stored information 
unit lu is descrambled when it is viewed, users who do 

45 not pay fees from unfairly viewing the information unit 
lu. Therefore, the present invention is high in affinity for 
a system of charging fees in the case of decryption. 
[0337] While the invention has been described in 
detail, the foregoing description is in all aspects illustra- 

so tive and not restrictive. It is understood that numerous 
other modifications and variations can be devised with- 
out departing from the scope of the invention. 

Claims 

55 

1 . An information transmission apparatus (1 1 0) in use 
for an information transmission system (100) where 
an encrypted information (It) comprised of a plural- 
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3. 



ity of information units (lu) each hierarchically 
encrypted and multiplexed to each other is commu- 
nicated between at least two parties, said informa- 
tion (It) being encrypted for the transmission, said 
apparatus (1 10) comprising: 

an information unit producing means (111) for 
producing said information unit (lu); 
a first encryption means (112) for encrypting 
said information unit (lu) with a first predeter- 
mined encryption system to produce an 
encrypted information unit (lue); and 
a first multiplex means (113) for multiplexing at 
least one of said information unit (lu) and said 
encrypted information unit (lue) to produce a 
multiplexed information unit (Im) , 

An information transmission apparatus (110) as 
claimed in Claim 1 , further comprising: 

a second encryption means (112) for encrypt- 
ing said multiple information (Im) with a second 
predetermined encryption system to produce 
said encrypted multiplexed information (lue); 
and 

a second multiplex means (113) for multiplex- 
ing said encrypted information unit (lue) to pro- 
duce said multiplexed information (Im). 

An information transmission apparatus (110) as 
claimed in Claim 2, further comprising: 

a third encryption means (114) for encrypting 
said multiplexed information (Im) with a third 
predetermined encryption system to produce 
an encrypted multiple information unit (Ime). 

An information transmission apparatus (510) as 
claimed in Claim 3, wherein said third predeter- 
mined encryption system is the same as that 
applied to said encrypted information (It). 

An information transmission apparatus (510) as 
claimed in Claim 3, wherein said second predeter- 
mined encryption system is the same as said third 
predetermined encryption system. 

An information transmission apparatus (510) as 
claimed in Claim 3, wherein said first, second, and 
third predetermined encryption systems are the 
same. 

An information transmission apparatus (110) as 
claimed in Claim 1, further comprising: 

a transmitting means (115) for converting said 
encrypted multiplexed information (Ime) into a 
format suitable for an efficient transmission. 
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An information transmission apparatus (51 OR) as 
claimed in Claim 1, wherein said first encryption 
means (512) encrypts said information unit (lu) with 
an encryption system suitable for the transmission 
of information. 

An information transmission apparatus (130) in use 
for an information transmission system (100) where 
an encrypted information (It) comprised of a plural- 
ity of information units (lu) each hierarchically 
encrypted and multiplexed to each other is commu- 
nicated between at least two parties, said informa- 
tion (It) being encrypted for the transmission, said 
apparatus (110) comprising: 

a first decryption means (132) for decrypting 
said encrypted information (It) with a first 
decryption system to produce a first multi- 
plexed information unit (Im); 
a first demultiplex means (133) for demultiplex- 
ing said first multiplexed information unit (Im) 
into any of a first encrypted information unit 
(lue), a second multiplexed information unit 
(lue) and said information unit (lu); and 
a second decryption means (134) for decrypt- 
ing said first encrypted information unit (lue) 
with a second decryption system to produce 
said information unit (lu) or a second encrypted 
information unit (lue). 



10. 



11, 



An information transmission -apparatus (130) 
claimed in Claim 9, further comprising: 



as 



55 



a second demultiplex means (133) for demulti- 
plexing said second multiplexed information 
unit (lue); 

a third decryption means (132) for decrypting 
said second encrypted information unit (lue) 
with a third predetermined decryption system 
to produce said information unit (lu). 

An information transmission apparatus (130) as 
claimed in Claim 9, wherein said first decryption 
system is the same as that applied^ to said 
encrypted information (It). 



12. An information transmission apparatus (1030) as 
claimed in Claim 1, further comprising: 

a storage means (1034) provided between said 
first demultiplexing means (1033) and said sec- 
ond decryption means (1035) for storing any of 
said first and second* encrypted information 
units (lue). 

13. An information transmission apparatus (1030) as 
claimed in Claim 12, further comprising: 
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10 



a reproducing means (1036) for receiving said 
encrypted information units (lue) from said sec- 
ond decryption means (1035) to produce a 
reproduction information (Ir) indicating a con- 
tent said encrypted information (It), said repro- 
ducing means (1036) requesting said storage 
means (1034) to supply said stored encryption 
information unit (lue) to said second decryption 
means (1035). 

1 4. An information transmission method for transmitting 
an encrypted information (It) comprised of a plural- 
ity of information units (lu) each hierarchically 
encrypted and multiplexed to each other is commu- 
nicated between at least two parties, said informa- 
tion (It) being encrypted for the transmission, said 
method comprising the steps of: 

producing (S301) said information unit (lu); 
encrypting (S302) said information unit (lu) 
with a first predetermined encryption system to 
produce an encrypted information unit (lue); 
and 

multiplexing (S303) at least one of said infor- 
mation unit (lu) and said encrypted information 
unit (lue) to produce a multiplexed information 
unit (lm) . 

15. An information transmission method as claimed in 
Claim 14, further comprising the steps of : 

encrypting (S302) said multiple information 
(lm) with a second predetermined encryption 
system to produce said encrypted multiplexed 
information (lue); and 

multiplexing (S303) said encrypted information 
unit (lue) to produce said multiplexed informa- 
tion (lm). 

16. An information transmission method as claimed in 
Claim 15. further comprising: 

encrypting (S304) said multiplexed information 
(lm) with a third predetermined encryption sys- 
tem to produce an encrypted multiple informa- 
tion unit (Ime). 

17. An information transmission method as claimed in 
Claim 16, wherein said third predetermined encryp- 
tion system is the same as that applied to said 
encrypted information (It). 

18. An information transmission method as claimed in 
Claim 16. wherein said second predetermined 
encryption system is the same as said third prede- 
termined encryption system. 

19. An information transmission method as claimed in 



Claim 16, wherein said first, second, and third pre- 
determined encryption systems are the same. 

20. An information transmission method as claimed in 
Claim 14, further comprising the step of : 

converting (S305) said encrypted multiplexed 
information (Ime) into a format suitable for an 
efficient transmission. 



21. An information transmission method as claimed in 
Claim 14, wherein at said encrypting step (S302) 
said information unit (lu) is encrypted with an 
encryption system suitable for the transmission of 

is information. 

22. An information transmission method for transmitting 
an encrypted information (It) comprised of a plural- 
ity of information units (lu) each hierarchically 

20 encrypted and multiplexed to each other is commu- 
nicated between at least two parties, said informa- 
tion (It) being encrypted for the transmission, said 
method comprising the steps of: 
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decrypting (S402) said encrypted information 
(It) with a first decryption system to produce a 
first multiplexed information unit (lm); 
demultiplexing (S403) said first multiplexed 
information unit (lm) into any of a first 
encrypted information unit (lue), a second mul- 
tiplexed information unit (lue) and said informa- 
- tion unit (lu); and 
decrypting (S405) said first encrypted informa- 
tion unit (lue) with a second decryption system 
to produce said information unit (lu) or a sec- 
ond encrypted information unit (lue). 

23. An information transmission method as claimed in 
Claim 22, further comprising the steps of: 

demultiplexing (S404) said second multiplexed 
information unit (lue); 

decrypting (S405) said second encrypted infor- 
mation unit (lue) with a third predetermined 
decryption system to produce said information 
unit (lu). 



24. An information transmission apparatus (130) as 
claimed in Claim 22, wherein said first decryption 

so system is the same as that applied to said 
encrypted information (It). 

25. An information transmission apparatus (1030) as 
claimed in Claim 14, further comprising the step of: 
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storing (S1204) any of said first and second 
encrypted information units (lue). 
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26. An information transmission apparatus (1030) as 
claimed in Claim 25, further comprising the step of: 

a reproducing means (1036) for receiving said 
encrypted information units (iue) from said sec- s 
ond decryption means (1035) to produce a 
reproduction information (Ir) indicating a con- 
tent said encrypted information (It), said repro- 
ducing means (1036) requesting said storage 
means (1034) to supply said stored encryption 10 
information unit (Iue) to said second decryption 
means (1035). 

27. An information transmission system (100) for trans- 
mitting an encrypted information (It) comprised of a is 
plurality of information units (lu) each hierarchically 
encrypted and multiplexed to each other is commu- 
nicated between at least two parties, said informa- 
tion (It) being encrypted for the transmission, said 
system (100) comprising: 20 

an information unit producing means (111) for 
producing said information unit (lu); 
a first encryption means (112) for encrypting 
said information unit (lu) with a first predeter- 25 
mined encryption system to produce an 
encrypted information unit (Iue); 
a first multiplex means (1 13) for multiplexing at 
least one of said information unit (lu) and said 
encrypted information unit (Iue) to produce a 30 
multiplexed information unit (tm); 
a first decryption means (132) for decrypting 
said encrypted information (It) with a first 
decryption system to produce a first multi- 
plexed information unit (Im); 35 
a first demultiplex means (133) for demultiplex- 
ing said first multiplexed information unit (Im) 
into any of a first encrypted information unit 
(Iue), a second multiplexed information unit 
(Iue) and said information unit (lu); and 40 
a second decryption means (134) for decrypt- 
ing said first encrypted information unit (Iue) 
with a second decryption system to produce 
said information unit (lu) or a second encrypted 
information unit (Iue). _ 45 

28. An information transmission system (100) as 
claimed in Claim 27, further comprising: 

a second encryption means (112) for encrypt- so 
ing said multiple information (Im) with a second 
predetermined encryption system to produce 
said encrypted multiplexed information (Iue); 
and 

a second multiplex means (113) for multiplex- ss 
ing said encrypted information unit (Iue) to pro- 
duce said multiplexed information (Im). 



29. An information transmission system (100) as 
claimed in Claim 28, further comprising: 

a third encryption means (114) for encrypting 
said multiplexed information (Im) with a third 
predetermined encryption system to produce 
an encrypted multiple information unit (Ime). 

30. An information transmission system (500) as 
claimed in Claim 29, wherein said third predeter- 
mined encryption system is the same as that 
applied to said encrypted information (It). 

31. An information transmission system (500) as 
claimed in Claim 29, wherein said second predeter- 
mined encryption system is the same as said third 
predetermined encryption system. 

32. An information transmission system (500) as 
claimed in Claim 29, wherein said first, second, and 
third predetermined encryption systems are the 
same. 

33. An information transmission system (100) as 
claimed in Claim 27, further comprising: 

a transmitting means (115) for converting said 
encrypted multiplexed information (Ime) into a 
format suitable for an efficient transmission. 

34. An information transmission system (500 R) as 
claimed in Claim 27, wherein said first encryption 
means (512) encrypts said information unit (lu) with 
an encryption system suitable for the transmission 
of information. 

35. An information transmission system (100) as 
claimed in Claim 27, further comprising: 

a second demultiplex means (133) for demulti- 
plexing said second multiplexed information 
unit (Iue); 

a third decryption means (132) for decrypting 
said second encrypted information unit (Iue) 
with a third predetermined decryption system 
to produce said information unit (lu). 

36. An information transmission system (100) as 
claimed in Claim 27, wherein said first decryption 
system is the same as that applied to said 
encrypted information (It). 

37. An information transmission system apparatus 
(1000) as claimed in Claim 27. further comprising: 

a storage means (1034) provided between said 
first demultiplexing means (1 033) and said sec- 
ond decryption means (1035) for storing any of 
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said first and second encrypted information 
units (lue). 

38. An information transmission system (1000) as 
claimed in Claim 30, further comprising: $ 

a reproducing means (1036) for receiving said 
encrypted information units (lue) from said sec- 
ond decryption means (1035) to produce a 
reproduction information (Ir) indicating a con- 10 
tent said encrypted information (It), said repro- 
ducing means (1036) requesting said storage 
means (1034) to supply said stored encryption 
information unit (lue) to said second decryption 
means (1035). 15 
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